We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 677 published victims and 20 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 677 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 316 victims
Known locations 20 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Dark Eye as a ransomware group with 677 published victims.

United States is currently the most targeted country in this dataset.

20 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 472 69.7%
  • Pending 205 30.3%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (20)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 5h ago 2q2spejlgz2x5haqe3ygclxj6jwlylgj5rg4jgwax6ub2fbpct27ibyd.onion
    Leak location 5 Onion service Up checked 5h ago xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion
    Leak location 2 Onion service Up checked 5h ago 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 1 Onion service Up checked 5h ago z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 20 Onion service Down checked 5h ago zsglo7t7osxyk3vcl7zxzup7hs4ir52sntteymmw63zvoxzcqytlw7qd.onion
    Leak location 19 Onion service Down checked 5h ago xtcwd3xmxpggtizn7kmwwqeizexflkkyqsytg2kauccau6ddsfa4gfyd.onion
    Leak location 17 Onion service Down checked 5h ago jziu7k7uee467r2wt66ndrwymmw7tsmqgcqi7aemcaxraqmaf2hdm3yd.onion
    Leak location 18 Onion service Down checked 5h ago nwtetzmrqhxieetg5lvth7szzvg35gfrqt23ly46vku56oo7pkueswyd.onion
    Leak location 14 Onion service Down checked 5h ago eogeko3sdn66gb7vjpwpmlmmmzfx7umtwaugpf5l6tb5jveolfydnuad.onion
    Leak location 13 Onion service Down checked 5h ago dbvczza7nhwdb5kdvkzjtkrcvwnrt5viw7mihutueprvajy7rxhwq6id.onion
    Leak location 16 Onion service Down checked 5h ago guestuctexqqaoxuahuydfa6ovxuhtng66pgyr5gqcrsi7qgchpkad.onion
    Leak location 15 Onion service Down checked 5h ago ewrxgpvv7wsrqq7itfwg5jr7lkc6zzknndmru5su2ugrowxo3wwy5yad.onion
    Leak location 11 Onion service Down checked 5h ago 73h3lxn24kuayyfkn4t6ij7e67jklo24vqzqdhpts3ygmim7hu6u6aid.onion
    Leak location 10 Onion service Down checked 5h ago 6dgi54prfmpuuolutr4hl3akasxbx4o34g5y2bj4blrvzzkjemhxenad.onion
    Leak location 12 Onion service Down checked 5h ago bpoowhokr3vi32l3t4mjdtdxfrfpigwachopk5ojwmgxihnojhsawuyd.onion
    Leak location 9 Onion service Down checked 5h ago 4wcrfql53ljekid3sn66z6swjot725muveddq77utxltaelw64eikfid.onion
    Leak location 8 Onion service Down checked 5h ago 3ro23rujyigqrlrwk3e4keh3a3i6ntgrm3f42tbiqtf7vke47c6a6ayd.onion
    Leak location 7 Onion service Down checked 5h ago 2yczff6zyiey3gkgl5anwejktdp73abxbzbnvwobmrwkwgf3hudpyvyd.onion
    Leak location 3 Onion service Down checked 5h ago dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion
    Leak location 4 Onion service Down checked 5h ago dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion

    Top Activity Sectors (17)

    Victims (677)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 101–200 of 677.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Brian Cox id29805 View details United Kingdom Other leaked
    Ransomware Sayre Associates id29726 View details United States Finance / Legal / Insurance leaked
    Ransomware REHA-ACTIV id29647 View details Germany Healthcare / Pharma leaked
    Ransomware Copamex id29590 View details Mexico Manufacturing / Engineering leaked
    Ransomware SETS Solutions id29591 View details Lebanon IT leaked
    Ransomware Synex International Pvt Ltd id29544 View details Sri Lanka Energy leaked
    Ransomware Taos Mountain Casino id29546 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware Panorama BPO id29547 View details Philippines Finance / Legal / Insurance leaked
    Ransomware Shoreline Sightseeing id29391 View details United States Construction / Real Estate leaked
    Ransomware Henry Molded Products Likely to Engage tag. id29392 View details United States Public Sector leaked
    Ransomware President Container Group id29461 View details United States Manufacturing / Engineering leaked
    Ransomware ksmart.ca id29466 View details Canada Construction / Real Estate leaked
    Ransomware practicus.co.uk id29467 View details United Kingdom Services pending
    Ransomware refreshmentsystems.co.uk id29468 View details United Kingdom Other leaked
    Ransomware dunasgroen.nl id29469 View details Netherlands Services leaked
    Ransomware northbridge.com id29470 View details Canada Finance / Legal / Insurance leaked
    Ransomware wsm.co.uk id29471 View details United Kingdom Finance / Legal / Insurance leaked
    Ransomware jcripberger.com id29473 View details Germany Construction / Real Estate leaked
    Ransomware pieralisi.com id29474 View details Italy Other leaked
    Ransomware nemd.com id29475 View details Niger Construction / Real Estate leaked
    Ransomware fabbricausa.com id29476 View details United States Manufacturing / Engineering leaked
    Ransomware erh.co.uk id29477 View details United Kingdom Services leaked
    Ransomware waypointsolutions.com id29478 View details United States Services leaked
    Ransomware profundo.nl id29479 View details Netherlands Other leaked
    Ransomware FWMK Law Offices id29480 View details Israel Finance / Legal / Insurance pending
    Ransomware Ramos Rheumatology id29481 View details United States Services leaked
    Ransomware hbroch.com id29485 View details Germany Manufacturing / Engineering leaked
    Ransomware duboisag.com id29487 View details Switzerland Agriculture / Food leaked
    Ransomware qlslogistics.com.au id29488 View details Australia Finance / Legal / Insurance pending
    Ransomware dentonfirm.com id29489 View details United States Finance / Legal / Insurance pending
    Ransomware Greenway Technologies id29490 View details Germany Construction / Real Estate leaked
    Ransomware Delbrook Capital Advisors id29491 View details United States Finance / Legal / Insurance pending
    Ransomware WG Neukölln id29492 View details Germany Services leaked
    Ransomware rolser.com id29520 View details Spain Services leaked
    Ransomware epbinsurance.com id29521 View details United States Finance / Legal / Insurance pending
    Ransomware jakn.com id29522 View details — IT leaked
    Ransomware allianceadjustment.com id29523 View details United States Finance / Legal / Insurance leaked
    Ransomware xtr-global.de id29524 View details Germany Services pending
    Ransomware saver.nl id29525 View details Netherlands Services leaked
    Ransomware vegfresh.com id29526 View details United States Agriculture / Food leaked
    Ransomware ggroupcpas.com id29527 View details United States Finance / Legal / Insurance pending
    Ransomware businessrecord.com id29528 View details United States Other pending
    Ransomware sphvalue.com id29529 View details — Finance / Legal / Insurance leaked
    Ransomware ennsco.ca id29530 View details Canada Finance / Legal / Insurance leaked
    Ransomware arsenalscaffold.com id29531 View details United Kingdom Construction / Real Estate leaked
    Ransomware Heartland Growers id29335 View details United States Retail / E-commerce leaked
    Ransomware HELIX INTERNATIONAL id29336 View details United Kingdom Healthcare / Pharma leaked
    Ransomware Prologic Construction id29337 View details Canada Education leaked
    Ransomware Le Pain Quotidien US id29310 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware Vega id29282 View details — Manufacturing / Engineering leaked
    Ransomware ZFG ALTHERM Engineering id29274 View details Austria Manufacturing / Engineering leaked
    Ransomware TAURUS INVESTMENT HOLDINGS id29275 View details Cyprus Finance / Legal / Insurance leaked
    Ransomware Plan id29202 View details United States Telecommunications leaked
    Ransomware Ingelan id29205 View details Spain Construction / Real Estate leaked
    Ransomware AdvancedHEALTH. id29187 View details United States Finance / Legal / Insurance pending
    Ransomware AdvancedHEALTH id29186 View details United States Finance / Legal / Insurance pending
    Ransomware LeRoy Surveyors & Engineers id29167 View details United States Construction / Real Estate leaked
    Ransomware Advanced Medical Consultants id29173 View details United States Finance / Legal / Insurance pending
    Ransomware MicroMarketing id29132 View details — Hospitality / Food & Beverage / Tourism leaked
    Ransomware Pamil Modulsystem id29133 View details Sweden Construction / Real Estate leaked
    Ransomware Tricon Infotech id29134 View details India Finance / Legal / Insurance leaked
    Ransomware CF Evans Construction id28977 View details United States Finance / Legal / Insurance leaked
    Ransomware CMC Expertise Comptable id28974 View details France Finance / Legal / Insurance leaked
    Ransomware Cult Wines id28889 View details United Kingdom Finance / Legal / Insurance leaked
    Ransomware Promotion AB id28581 View details Sweden Communication / Marketing leaked
    Ransomware ibswebsite.com id28591 View details United States IT leaked
    Ransomware delonhampton.com id28592 View details United Kingdom Manufacturing / Engineering leaked
    Ransomware aotco.com id28593 View details United States Manufacturing / Engineering leaked
    Ransomware wmsopko.com id28594 View details Ukraine Manufacturing / Engineering leaked
    Ransomware andrewtjohnson.com id28595 View details United States Services leaked
    Ransomware fatbrands.com id28596 View details United States Hospitality / Food & Beverage / Tourism leaked
    Ransomware mopec.com id28597 View details United States Manufacturing / Engineering leaked
    Ransomware avalonflooring.com id28598 View details United States Retail / E-commerce leaked
    Ransomware gelatissimo.com.au id28599 View details Australia Hospitality / Food & Beverage / Tourism leaked
    Ransomware rosehillgardens.com id28600 View details United States Agriculture / Food leaked
    Ransomware massdevelopment.com id28601 View details United States Public Sector leaked
    Ransomware Synmosa Biopharma id28612 View details Taiwan, Province of China Healthcare / Pharma leaked
    Ransomware INCYTE id28689 View details United States Healthcare / Pharma pending
    Ransomware The Galliher Law Firm id28694 View details United States Finance / Legal / Insurance leaked
    Ransomware Primius Law Firm id28695 View details Greece Finance / Legal / Insurance leaked
    Ransomware Champion Homes id28717 View details Australia Construction / Real Estate leaked
    Ransomware medicalnetworks CJ GmbH & Co. KG id28260 View details Germany Healthcare / Pharma leaked
    Ransomware Empower Group id28250 View details United States Communication / Marketing leaked
    Ransomware Curtis Design Group id28212 View details United States Communication / Marketing leaked
    Ransomware McCOR id28211 View details Canada Construction / Real Estate leaked
    Ransomware bela - pharm id28210 View details Germany Healthcare / Pharma pending
    Ransomware Apply Capnor id28203 View details Norway Energy leaked
    Ransomware breslinbuilders.com id28193 View details United States Construction / Real Estate leaked
    Ransomware tulsachamber.com id28192 View details United States NGOs / Associations leaked
    Ransomware milliondollarbabyco.com id28189 View details United States Retail / E-commerce leaked
    Ransomware graphicinfo.com id28188 View details United States IT leaked
    Ransomware gtlcompany.com id28187 View details United States Transportation / Travel / Logistics leaked
    Ransomware tremcar.com id28186 View details Canada Manufacturing / Engineering leaked
    Ransomware imadesign.com id28185 View details United States Construction / Real Estate leaked
    Ransomware advprograms.com id28184 View details United States Manufacturing / Engineering leaked
    Ransomware novafp.com id28183 View details Brazil Finance / Legal / Insurance leaked
    Ransomware ppiplastics.com id28182 View details United Kingdom Manufacturing / Engineering leaked
    Ransomware je-nyc.com id28181 View details United States Construction / Real Estate leaked
    Ransomware edtg.com id28104 View details United States IT leaked
    Ransomware Travel of America id28103 View details United States Hospitality / Food & Beverage / Tourism leaked