dragonforce
Known ransomware group ACTIVE Active · high-tempo
DragonForce is a ransomware-as-a-service operation that gained prominence in 2024, offering affiliates a customizable encryptor and a "cartel" model. It has been linked to high-profile retail and enterprise intrusions and practices aggressive double extortion.
13
Total Claims
9
Critical
—
Records Claimed
5
Industries Hit
Active span: Apr 12, 2026 – Jun 5, 2026 · 13 organizations targeted
Active · high-tempo
Actor Threat Profile
Activity Timeline
Peak: May 2026 (8)Apr 2026
LessMore
Jun 2026Share this profile
Top Targeted Industries
Healthcare 5
Financial Services 3
Business Services 3
Hospitality and Tourism 1
Energy 1
Tradecraft & Infrastructure
4
Documented tools
4 / 5
MITRE tactics / techniques
3
Known leak sites
CredentialTheftDiscoveryEnum
Full intelligence profile on ransomware.live →
Targeted Organizations
Claims by dragonforce
Critical
Ransomware Claim: REHA-ACTIV
REHA-ACTIV
dragonforce
Ransomware Healthcare
Jun 6, 2026 Low
Ransomware Claim: Taos Mountain Casino
Taos Mountain Casino
dragonforce
Ransomware Hospitality and Tourism
Jun 2, 2026 Critical
Ransomware Claim: Ramos Rheumatology
Ramos Rheumatology
dragonforce
Ransomware Healthcare
May 28, 2026 Critical
Ransomware Claim: Delbrook Capital Advisors
Delbrook Capital Advisors
dragonforce
Ransomware Financial Services
May 27, 2026 Critical
Ransomware Claim: epbinsurance.com
epbinsurance.com
dragonforce
Ransomware Financial Services
May 27, 2026 Critical
Ransomware Claim: TAURUS INVESTMENT HOLDINGS
TAURUS INVESTMENT HOLDINGS
dragonforce
Ransomware Financial Services
May 20, 2026 Critical
Ransomware Claim: AdvancedHEALTH
AdvancedHEALTH
dragonforce
Ransomware Healthcare
May 17, 2026 Critical
Ransomware Claim: Advanced Medical Consultants
Advanced Medical Consultants
dragonforce
Ransomware Healthcare
May 16, 2026 Low
Ransomware Claim: CMC Expertise Comptable
CMC Expertise Comptable
dragonforce
Ransomware Business Services
May 9, 2026 Critical
Ransomware Claim: Synmosa Biopharma
Synmosa Biopharma
dragonforce
Ransomware Healthcare
Apr 27, 2026 High
Ransomware Claim: The Galliher Law Firm
The Galliher Law Firm
dragonforce
Ransomware Business Services
Apr 23, 2026 High
Ransomware Claim: Primius Law Firm
Primius Law Firm
dragonforce
Ransomware Business Services
Apr 23, 2026 Critical
Ransomware Claim: Affordable Oil
Affordable Oil
dragonforce
Ransomware Energy
Apr 13, 2026