dragonforce emblem

dragonforce

Known ransomware group ACTIVE
Currently active

DragonForce is a ransomware-as-a-service operation that gained prominence in 2024, offering affiliates a customizable encryptor and a "cartel" model. It has been linked to high-profile retail and enterprise intrusions and practices aggressive double extortion.

15

Total Claims

10

Critical

—

Records Claimed

6

Industries Hit

Active span: Apr 12, 2026 – Sep 23, 2026 · 15 organizations targeted

Currently active
Activity 3.0 Severity 8.2 Sectors 6.5 Tooling 1.0

Actor Threat Profile

Activity Timeline

Peak: May 2026 (8)
Apr 2026
LessMore
Sep 2026

Share this profile

Shareable intel card for dragonforce

Top Targeted Industries

Healthcare 6
Financial Services 3
Business Services 3
Other 1
Hospitality and Tourism 1
Energy 1

Tradecraft & Infrastructure

0

Documented tools

4 / 5

MITRE tactics / techniques

5

Known leak sites

Full intelligence profile on ransomware.live →

Claims by dragonforce

Low

Ransomware Claim: BMGP Groupe

BMGP Groupe
dragonforce
Ransomware Other
Sep 24, 2026
Critical
400 GB leaked

Ransomware Claim: Owen Leigh Optometry

Owen Leigh Optometry
dragonforce
Ransomware Healthcare
Sep 16, 2026
Critical

Ransomware Claim: REHA-ACTIV

REHA-ACTIV
dragonforce
Ransomware Healthcare
Jun 6, 2026
Low

Ransomware Claim: Taos Mountain Casino

Taos Mountain Casino
dragonforce
Ransomware Hospitality and Tourism
Jun 2, 2026
Critical

Ransomware Claim: Ramos Rheumatology

Ramos Rheumatology
dragonforce
Ransomware Healthcare
May 28, 2026
Critical

Ransomware Claim: epbinsurance.com

epbinsurance.com
dragonforce
Ransomware Financial Services
May 27, 2026
Critical

Ransomware Claim: Delbrook Capital Advisors

Delbrook Capital Advisors
dragonforce
Ransomware Financial Services
May 27, 2026
Critical

Ransomware Claim: TAURUS INVESTMENT HOLDINGS

TAURUS INVESTMENT HOLDINGS
dragonforce
Ransomware Financial Services
May 20, 2026
Critical

Ransomware Claim: AdvancedHEALTH

AdvancedHEALTH
dragonforce
Ransomware Healthcare
May 17, 2026
Critical

Ransomware Claim: Advanced Medical Consultants

Advanced Medical Consultants
dragonforce
Ransomware Healthcare
May 16, 2026
Low

Ransomware Claim: CMC Expertise Comptable

CMC Expertise Comptable
dragonforce
Ransomware Business Services
May 9, 2026
Critical

Ransomware Claim: Synmosa Biopharma

Synmosa Biopharma
dragonforce
Ransomware Healthcare
Apr 27, 2026
High

Ransomware Claim: The Galliher Law Firm

The Galliher Law Firm
dragonforce
Ransomware Business Services
Apr 23, 2026
High

Ransomware Claim: Primius Law Firm

Primius Law Firm
dragonforce
Ransomware Business Services
Apr 23, 2026
Critical

Ransomware Claim: Affordable Oil

Affordable Oil
dragonforce
Ransomware Energy
Apr 13, 2026

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.