We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 677 published victims and 20 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 677 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 316 victims
Known locations 20 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Dark Eye as a ransomware group with 677 published victims.

United States is currently the most targeted country in this dataset.

20 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 472 69.7%
  • Pending 205 30.3%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (20)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 5h ago 2q2spejlgz2x5haqe3ygclxj6jwlylgj5rg4jgwax6ub2fbpct27ibyd.onion
    Leak location 5 Onion service Up checked 5h ago xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion
    Leak location 2 Onion service Up checked 5h ago 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 1 Onion service Up checked 5h ago z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 20 Onion service Down checked 5h ago zsglo7t7osxyk3vcl7zxzup7hs4ir52sntteymmw63zvoxzcqytlw7qd.onion
    Leak location 19 Onion service Down checked 5h ago xtcwd3xmxpggtizn7kmwwqeizexflkkyqsytg2kauccau6ddsfa4gfyd.onion
    Leak location 17 Onion service Down checked 5h ago jziu7k7uee467r2wt66ndrwymmw7tsmqgcqi7aemcaxraqmaf2hdm3yd.onion
    Leak location 18 Onion service Down checked 5h ago nwtetzmrqhxieetg5lvth7szzvg35gfrqt23ly46vku56oo7pkueswyd.onion
    Leak location 14 Onion service Down checked 5h ago eogeko3sdn66gb7vjpwpmlmmmzfx7umtwaugpf5l6tb5jveolfydnuad.onion
    Leak location 13 Onion service Down checked 5h ago dbvczza7nhwdb5kdvkzjtkrcvwnrt5viw7mihutueprvajy7rxhwq6id.onion
    Leak location 16 Onion service Down checked 5h ago guestuctexqqaoxuahuydfa6ovxuhtng66pgyr5gqcrsi7qgchpkad.onion
    Leak location 15 Onion service Down checked 5h ago ewrxgpvv7wsrqq7itfwg5jr7lkc6zzknndmru5su2ugrowxo3wwy5yad.onion
    Leak location 11 Onion service Down checked 5h ago 73h3lxn24kuayyfkn4t6ij7e67jklo24vqzqdhpts3ygmim7hu6u6aid.onion
    Leak location 10 Onion service Down checked 5h ago 6dgi54prfmpuuolutr4hl3akasxbx4o34g5y2bj4blrvzzkjemhxenad.onion
    Leak location 12 Onion service Down checked 5h ago bpoowhokr3vi32l3t4mjdtdxfrfpigwachopk5ojwmgxihnojhsawuyd.onion
    Leak location 9 Onion service Down checked 5h ago 4wcrfql53ljekid3sn66z6swjot725muveddq77utxltaelw64eikfid.onion
    Leak location 8 Onion service Down checked 5h ago 3ro23rujyigqrlrwk3e4keh3a3i6ntgrm3f42tbiqtf7vke47c6a6ayd.onion
    Leak location 7 Onion service Down checked 5h ago 2yczff6zyiey3gkgl5anwejktdp73abxbzbnvwobmrwkwgf3hudpyvyd.onion
    Leak location 3 Onion service Down checked 5h ago dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion
    Leak location 4 Onion service Down checked 5h ago dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion

    Top Activity Sectors (17)

    Victims (677)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 501–600 of 677.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Bridgehead id20702 View details Canada Communication / Marketing leaked
    Ransomware Ess Brothers & Sons id20701 View details United States Communication / Marketing leaked
    Ransomware Metropolis Country Club id20700 View details United States Communication / Marketing leaked
    Ransomware Equip'LaboFROID id20699 View details France Other leaked
    Ransomware RRS Foodservice id20689 View details United States Agriculture / Food leaked
    Ransomware Strafford County NH id20688 View details United States Public Sector leaked
    Ransomware Clark Mechanical id20687 View details United States Communication / Marketing leaked
    Ransomware Beaumont Products id19965 View details United States Communication / Marketing leaked
    Ransomware Statesman Business Advisors id19964 View details United States Public Sector leaked
    Ransomware Iris ID id19263 View details United States Transportation / Travel / Logistics pending
    Ransomware City of Grove id19262 View details United States Public Sector leaked
    Ransomware KraftKisarna id19186 View details Sweden Transportation / Travel / Logistics leaked
    Ransomware Pryor Morrow id19185 View details United States Communication / Marketing leaked
    Ransomware Pratt Homes id19184 View details Canada Communication / Marketing leaked
    Ransomware Setpoint Systems id19183 View details United States Manufacturing / Engineering leaked
    Ransomware Condista id19125 View details United States Communication / Marketing leaked
    Ransomware Precision Textiles id19124 View details United States Communication / Marketing leaked
    Ransomware Coulter & Tateoka id19123 View details United States Finance / Legal / Insurance leaked
    Ransomware Miller & Caggiano id19122 View details United States Finance / Legal / Insurance leaked
    Ransomware Service Trade SpA id19121 View details Italy Retail / E-commerce leaked
    Ransomware Harris Steel id19120 View details United States Manufacturing / Engineering leaked
    Ransomware Ossman Consultants Limited id19119 View details United Kingdom Communication / Marketing leaked
    Ransomware Phil Smith Automotive Group id19006 View details United States Manufacturing / Engineering leaked
    Ransomware Dermatology Solutions id19005 View details United States Services leaked
    Ransomware National Electronic Transit (N.E.T) id19004 View details United States Transportation / Travel / Logistics leaked
    Ransomware Altara id19003 View details United States Services leaked
    Ransomware IACC Holdings id19002 View details Egypt Transportation / Travel / Logistics leaked
    Ransomware Texla Energy Management id19001 View details United States Energy leaked
    Ransomware Atlanta Plastic & Reconstructive Specialists id18870 View details United States Manufacturing / Engineering leaked
    Ransomware Talley Metal Fabrication id18868 View details United States Manufacturing / Engineering leaked
    Ransomware Southern Avionics id18867 View details United States Communication / Marketing leaked
    Ransomware Industrial Dynamics id18866 View details United States Manufacturing / Engineering leaked
    Ransomware Thaon-les-Vosges id18796 View details France Public Sector leaked
    Ransomware architekturbuero-heller.de id18625 View details Germany Construction / Real Estate leaked
    Ransomware Yadea Group Holdings Ltd id18618 View details China Communication / Marketing leaked
    Ransomware Colemanmaterials id18617 View details — Communication / Marketing leaked
    Ransomware Kleen-Pak Products id18442 View details Singapore Communication / Marketing leaked
    Ransomware Moncaro id18441 View details Italy Agriculture / Food leaked
    Ransomware DTS -services id18440 View details United Kingdom Services pending
    Ransomware Cotswold Fayre id18294 View details United Kingdom Communication / Marketing pending
    Ransomware Vercoe Insurance Brokers id18293 View details New Zealand Finance / Legal / Insurance leaked
    Ransomware Steel Dynamics UK id18292 View details United Kingdom Manufacturing / Engineering leaked
    Ransomware E Leet Woodworking id18291 View details United States Communication / Marketing leaked
    Ransomware GS Floor Designs id18111 View details United States Communication / Marketing leaked
    Ransomware Al Bawani id17711 View details Saudi Arabia Construction / Real Estate pending
    Ransomware Tristram European id17710 View details New Zealand Communication / Marketing leaked
    Ransomware Heartcentre id17463 View details Australia Communication / Marketing pending
    Ransomware North American Spares id17462 View details United States Services pending
    Ransomware Accelerator id17461 View details Norway Transportation / Travel / Logistics pending
    Ransomware O&S Associates id17460 View details United States Manufacturing / Engineering pending
    Ransomware Farrar Corporation id17078 View details United States Manufacturing / Engineering pending
    Ransomware USGlobeCorp id17077 View details United States Communication / Marketing leaked
    Ransomware Kats, Jamison & Associates id17076 View details United States Communication / Marketing pending
    Ransomware SCP Building Products id17075 View details United Kingdom Construction / Real Estate pending
    Ransomware Engineering Design Initiative id17074 View details United States Manufacturing / Engineering pending
    Ransomware Angotti & Reilly id17073 View details United States NGOs / Associations pending
    Ransomware Land and Lakes id17072 View details United States Communication / Marketing pending
    Ransomware BENASSI IMMOBILIARE SAS DI BENASSI ROBERTO E C. id16971 View details Italy Communication / Marketing pending
    Ransomware Mapping Solutions id16943 View details — Services pending
    Ransomware Aquasys id16942 View details Czechia Construction / Real Estate pending
    Ransomware Jan Nygaard id16864 View details Denmark Manufacturing / Engineering pending
    Ransomware Sawley Lock O'Callaghan id16770 View details Australia Communication / Marketing leaked
    Ransomware PT PINS Indonesia id16612 View details Indonesia Other pending
    Ransomware Cogitis id16467 View details France IT pending
    Ransomware Ikav Global Energy id16428 View details Luxembourg Energy pending
    Ransomware Asheville Eye Associates id16427 View details United States Healthcare / Pharma pending
    Ransomware FINN id16133 View details Australia Communication / Marketing leaked
    Ransomware Williams Tank Lines id16132 View details United States Energy leaked
    Ransomware Engineered Tower Solutions id16131 View details United States Services leaked
    Ransomware Marine Floats id16130 View details United States Services leaked
    Ransomware Precision Walls id15895 View details United States Communication / Marketing leaked
    Ransomware Mobigator Technology Group id15782 View details Hong Kong IT leaked
    Ransomware SUSTA S.r.l. id15407 View details Italy Communication / Marketing leaked
    Ransomware Nunziaplast Srl id15373 View details Italy Manufacturing / Engineering leaked
    Ransomware Scolari id15157 View details Brazil Manufacturing / Engineering — pending
    Ransomware Mastery Schools id15032 View details United States Education — pending
    Ransomware Accuracy International id15031 View details United Kingdom Services — pending
    Ransomware Durham Region id14749 View details Canada Public Sector — pending
    Ransomware Orbit Software, Inc. id14667 View details United States IT — pending
    Ransomware Lyomark Pharma id14582 View details Germany Healthcare / Pharma — pending
    Ransomware KGK Group id14470 View details India NGOs / Associations — pending
    Ransomware Zimmerman & Walsh id14469 View details United States Finance / Legal / Insurance — pending
    Ransomware Graminex id14411 View details United States Communication / Marketing — pending
    Ransomware Controlled Power id14237 View details United States Energy — pending
    Ransomware Arc-Com id14236 View details United States Other — pending
    Ransomware PhD Services id14187 View details United States Services — pending
    Ransomware Sherwood Stainless & Aluminium id13954 View details United Kingdom Manufacturing / Engineering — pending
    Ransomware Igloo Cellulose id13953 View details Brazil Communication / Marketing — pending
    Ransomware Raifalsa-Alelor id13952 View details France Hospitality / Food & Beverage / Tourism — pending
    Ransomware Deane Roofing and Cladding id13951 View details Ireland Other — pending
    Ransomware Yang Enterprises id13887 View details United States Communication / Marketing — pending
    Ransomware Carver Companies id13886 View details United States Transportation / Travel / Logistics — pending
    Ransomware J&J Network Engineering id13885 View details Hong Kong Telecommunications — pending
    Ransomware PER4MANCE id13884 View details Czechia Communication / Marketing — pending
    Ransomware SMK Ingenieurbüro id13883 View details Germany Other — pending
    Ransomware Cydcor id13759 View details United States IT — pending
    Ransomware David E Shambach Architect id13676 View details United States Construction / Real Estate — pending
    Ransomware Hayes Beer Distributing id13675 View details United States Manufacturing / Engineering — pending
    Ransomware BK Aerospace id13543 View details United States Manufacturing / Engineering — pending
    Ransomware CertiCon id13530 View details Czechia IT — pending