We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 677 published victims and 20 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 677 Known published victims in this dataset
First discovered 2023-12-13 Earliest victim discovery date
Last discovered 2026-10-30 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 316 victims
Known locations 20 Leak or negotiation infrastructure tracked

Overview

Dragonforce is tracked by Dark Eye as a ransomware group with 677 published victims.

United States is currently the most targeted country in this dataset.

20 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 472 69.7%
  • Pending 205 30.3%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (20)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 5h ago 2q2spejlgz2x5haqe3ygclxj6jwlylgj5rg4jgwax6ub2fbpct27ibyd.onion
    Leak location 5 Onion service Up checked 5h ago xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion
    Leak location 2 Onion service Up checked 5h ago 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
    Leak location 1 Onion service Up checked 5h ago z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
    Leak location 20 Onion service Down checked 5h ago zsglo7t7osxyk3vcl7zxzup7hs4ir52sntteymmw63zvoxzcqytlw7qd.onion
    Leak location 19 Onion service Down checked 5h ago xtcwd3xmxpggtizn7kmwwqeizexflkkyqsytg2kauccau6ddsfa4gfyd.onion
    Leak location 17 Onion service Down checked 5h ago jziu7k7uee467r2wt66ndrwymmw7tsmqgcqi7aemcaxraqmaf2hdm3yd.onion
    Leak location 18 Onion service Down checked 5h ago nwtetzmrqhxieetg5lvth7szzvg35gfrqt23ly46vku56oo7pkueswyd.onion
    Leak location 14 Onion service Down checked 5h ago eogeko3sdn66gb7vjpwpmlmmmzfx7umtwaugpf5l6tb5jveolfydnuad.onion
    Leak location 13 Onion service Down checked 5h ago dbvczza7nhwdb5kdvkzjtkrcvwnrt5viw7mihutueprvajy7rxhwq6id.onion
    Leak location 16 Onion service Down checked 5h ago guestuctexqqaoxuahuydfa6ovxuhtng66pgyr5gqcrsi7qgchpkad.onion
    Leak location 15 Onion service Down checked 5h ago ewrxgpvv7wsrqq7itfwg5jr7lkc6zzknndmru5su2ugrowxo3wwy5yad.onion
    Leak location 11 Onion service Down checked 5h ago 73h3lxn24kuayyfkn4t6ij7e67jklo24vqzqdhpts3ygmim7hu6u6aid.onion
    Leak location 10 Onion service Down checked 5h ago 6dgi54prfmpuuolutr4hl3akasxbx4o34g5y2bj4blrvzzkjemhxenad.onion
    Leak location 12 Onion service Down checked 5h ago bpoowhokr3vi32l3t4mjdtdxfrfpigwachopk5ojwmgxihnojhsawuyd.onion
    Leak location 9 Onion service Down checked 5h ago 4wcrfql53ljekid3sn66z6swjot725muveddq77utxltaelw64eikfid.onion
    Leak location 8 Onion service Down checked 5h ago 3ro23rujyigqrlrwk3e4keh3a3i6ntgrm3f42tbiqtf7vke47c6a6ayd.onion
    Leak location 7 Onion service Down checked 5h ago 2yczff6zyiey3gkgl5anwejktdp73abxbzbnvwobmrwkwgf3hudpyvyd.onion
    Leak location 3 Onion service Down checked 5h ago dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion
    Leak location 4 Onion service Down checked 5h ago dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion

    Top Activity Sectors (17)

    Victims (677)

    Search, filter and paginate the victim timeline for Dragonforce. Showing 601–677 of 677.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Dimbleby Funeral Homes id13498 View details United States Communication / Marketing — pending
    Ransomware John Gallin & Son id13497 View details United States Finance / Legal / Insurance — pending
    Ransomware Mainland Machinery id13371 View details — Manufacturing / Engineering — pending
    Ransomware SBRPCA id13370 View details — Public Sector — pending
    Ransomware Raffmetal Spa id13292 View details Italy Manufacturing / Engineering — pending
    Ransomware Grand Rapids Gravel id13229 View details United States Communication / Marketing — pending
    Ransomware Franciscan Friars of the Atonement id13228 View details United States Other — pending
    Ransomware Elite Fitness id13227 View details New Zealand Retail / E-commerce — pending
    Ransomware Gray & Adams id13226 View details United Kingdom Other — pending
    Ransomware Vermont Panurgy id13225 View details United States Education — pending
    Ransomware Super Gardens id13222 View details Australia Services — pending
    Ransomware Hampden Veterinary Hospital id13221 View details United States Healthcare / Pharma — pending
    Ransomware Oahu Transit Services id13026 View details United States Services — pending
    Ransomware Seafrigo id12958 View details France Transportation / Travel / Logistics — pending
    Ransomware EvoEvents id12935 View details New Zealand Other — pending
    Ransomware Barrett Eye Care id12934 View details United States Hospitality / Food & Beverage / Tourism — pending
    Ransomware Parrish-McCall Constructors id12933 View details United States Construction / Real Estate — pending
    Ransomware Hoppecke id12927 View details Germany Energy — pending
    Ransomware Davis & Young id12882 View details Canada Finance / Legal / Insurance — pending
    Ransomware biremote.net id12789 View details Puerto Rico Services — pending
    Ransomware I.L.A. Local 1964 id12768 View details Mexico Communication / Marketing — pending
    Ransomware Dean Lumber & Supply id12591 View details United States Construction / Real Estate — pending
    Ransomware WindCom id12590 View details Spain Energy — pending
    Ransomware Malone id12566 View details Ireland Communication / Marketing — pending
    Ransomware Hardings Transport id12565 View details United Kingdom Transportation / Travel / Logistics — pending
    Ransomware Connelly Security Systems id12564 View details United Kingdom Communication / Marketing — pending
    Ransomware Motor Munich id12563 View details Spain Hospitality / Food & Beverage / Tourism — pending
    Ransomware Watt Carmichael id12536 View details United States Finance / Legal / Insurance — pending
    Ransomware Accurate Lock and Hardware id12532 View details United States Hospitality / Food & Beverage / Tourism — pending
    Ransomware Monocon International Refractory id12531 View details Macao Manufacturing / Engineering — pending
    Ransomware Persyn id12530 View details Belgium Construction / Real Estate — pending
    Ransomware Altipal id12528 View details Colombia Communication / Marketing — pending
    Ransomware Fullington Trailways id11676 View details United States Transportation / Travel / Logistics — pending
    Ransomware Deacon Jones id11672 View details United States Communication / Marketing — pending
    Ransomware New Production Concept id11581 View details Italy Communication / Marketing — pending
    Ransomware Kadushisoft id11577 View details Curaçao Communication / Marketing — pending
    Ransomware Saint Cecilia's Church of England School id11576 View details United Kingdom Education — pending
    Ransomware Swansea & South Wales id11575 View details United Kingdom Construction / Real Estate — pending
    Ransomware MajuHome Concept id11574 View details Malaysia Retail / E-commerce — pending
    Ransomware Team Locum id11573 View details United Kingdom Healthcare / Pharma — pending
    Ransomware Rigcon id11572 View details Australia Manufacturing / Engineering — pending
    Ransomware Vstblekinge Miljo id11571 View details Sweden Transportation / Travel / Logistics — pending
    Ransomware PalauGov id11538 View details Palau Communication / Marketing — pending
    Ransomware Aussizz Group id11522 View details Australia Education — pending
    Ransomware Dunbier Boat Trailers id11365 View details Australia Telecommunications — pending
    Ransomware Greenline Service id11363 View details United States Manufacturing / Engineering — pending
    Ransomware Teton Orthopaedics id11362 View details United States Communication / Marketing — pending
    Ransomware Jasper-Dubois County Public Library id11281 View details United States Public Sector — pending
    Ransomware Ward Transport & Logistics id11079 View details United States Transportation / Travel / Logistics — pending
    Ransomware Crystal Window & Door Systems id11048 View details United States Energy — pending
    Ransomware Faison id11036 View details United States Construction / Real Estate — pending
    Ransomware Erwat id11035 View details South Africa Communication / Marketing — pending
    Ransomware Artissimo Designs id11034 View details United States Manufacturing / Engineering — pending
    Ransomware Compression Leasing Services id10903 View details United States Communication / Marketing — pending
    Ransomware Westward 360 id10902 View details United States Services — pending
    Ransomware Geologics id10360 View details United States Telecommunications — pending
    Ransomware Ohio Lottery id10315 View details United States Other — pending
    Ransomware ACE Air Cargo id10248 View details — Transportation / Travel / Logistics — pending
    Ransomware Kinetic Leasing id10247 View details — Communication / Marketing — pending
    Ransomware Yakult Australia id10234 View details Australia Communication / Marketing — pending
    Ransomware Heart of Texas Region MHMR id10020 View details — Services — pending
    Ransomware PCTEL id10019 View details — Telecommunications — pending
    Ransomware Agl Welding Supply id10018 View details — Other — pending
    Ransomware Grayhill id10017 View details — Manufacturing / Engineering — pending
    Ransomware Leedarson Lighting id10016 View details — Services — pending
    Ransomware Coca-Cola Singapore id10015 View details Singapore Hospitality / Food & Beverage / Tourism — pending
    Ransomware Shorts id10014 View details — Services — pending
    Ransomware World Emblem International id10013 View details — Manufacturing / Engineering — pending
    Ransomware The GBUAHN id10012 View details — Healthcare / Pharma — pending
    Ransomware Baden id10011 View details Switzerland Education — pending
    Ransomware Dafiti Argentina id10010 View details Argentina Communication / Marketing — pending
    Ransomware Lunacon Construction Group id10009 View details — Construction / Real Estate — pending
    Ransomware Tglt id10008 View details — Construction / Real Estate — pending
    Ransomware Seven Seas id10007 View details United Arab Emirates Manufacturing / Engineering — pending
    Ransomware Decina id10006 View details Australia Manufacturing / Engineering — pending
    Ransomware Cooper Research Technology id10005 View details United Kingdom IT — pending
    Ransomware Greater Cincinnati Behavioral Health id10004 View details — Healthcare / Pharma — pending