Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
DragonForce is a ransomware operation that re-emerged in 2025 as a 'cartel'-style affiliate model, gaining prominence through collaboration with the Scattered Spider intrusion set.
DragonForce appeared around 2023 and rebranded in 2025 into a 'ransomware cartel' model, recruiting affiliates with high revenue shares, custom encryptors, and shared leak infrastructure. Its encryptor lineage has been linked in reporting to leaked Conti/LockBit builder code, and its encryptors target Windows, Linux and ESXi environments.
The operation rose sharply in 2025, in part through tactical partnership with Scattered Spider (UNC3944 / Octo Tempest), including the widely reported intrusions against UK retailers such as Marks & Spencer. Reporting through 2025-2026 credits DragonForce with well over 200 published victims and a claimed alliance with LockBit and Qilin. Scattered Spider tradecraft feeding these intrusions emphasizes help-desk social engineering, MFA bypass, and cloud/identity abuse before ransomware deployment.
DragonForce's leak site has listed victims in Saudi Arabia among its international claims. Such listings are extortion allegations and should be treated as claims, not confirmed breaches, unless independently verified.
Tools observed in intrusions leading to DragonForce's ransomware, per the community Ransomware Tool Matrix — observed use, not exhaustive. Snapshot 2026-08-07.
Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →
| Date | Victim | Country | Sector |
|---|---|---|---|
| 2026-08-05 | Mike Graham Heating And Air Conditioning | US | Other |
| 2026-08-05 | P. A. Inc. (Performance Alloys) | US | Manufacturing |
| 2026-08-05 | EduSpa | US | Hospitality |
| 2026-08-05 | Primary Eye Care | US | Healthcare |
| 2026-08-03 | TUI China | CN | Hospitality |
| 2026-07-31 | Lamont Pridmore | GB | — |
| 2026-07-30 | www.mbmlawsc.com | US | Professional Services |
| 2026-07-30 | RUS Industrial | US | Manufacturing |
| 2026-07-27 | Katathani Phuket Beach Resort | TH | Hospitality |
| 2026-07-26 | Deluxe Medical Supply | US | Healthcare |
| 2026-07-26 | Syntron Bioresearch | US | Healthcare |
| 2026-07-24 | ID engineering | ID | Manufacturing |