DragonForce

Active
669 victims named on the leak site
12 in the last 30 days
380 in the last 12 months
Apr 2023 first victim we recorded
Sep 7, 2026 most recent victim posted
25 leak sites tracked

Data as of September 9, 2026.

Credential exposure before the attack

19.4% of DragonForce victims whose domain we can identify (130 of 669) had employee credentials leak in the 12 months before DragonForce named them as a victim.

We don't know whether any of these credentials were how DragonForce gained initial access.

What industries DragonForce targets

Sector identified for 453 of 669 victims.

Manufacturing121
Construction69
Financial Services48
Healthcare34
Technology29
Legal28
Logistics23
Education17

Where the victims are located

Country identified for 469 of 669 victims.

United States212
United Kingdom41
Germany27
Canada22
Italy15
Australia14
France10
Argentina9

Most recent DragonForce victims

VictimSectorCountryPosted
Homewood Sales homewoodsales.comManufacturingUnited StatesSep 7, 2026
Norwood Law Firm norwoodlegal.comLegalUnited StatesSep 7, 2026
RubberMill rubbermill.comManufacturingUnited StatesSep 2, 2026
Brookview Financial brookviewfinancial.comNot identifiedUnited StatesAug 25, 2026
CRIBA criba.com.arConstructionArgentinaAug 25, 2026
Frato frato.comNot identifiedPortugalAug 25, 2026
Wozair wozair.comManufacturingUnited KingdomAug 25, 2026
Hogan Omidi hoganomidi.comLegalUnited StatesAug 22, 2026
R&D Machine and Engineering rdmachine.comManufacturingUnited StatesAug 19, 2026
Vermont XCenter vermont.com.brNot identifiedBrazilAug 19, 2026
GB Group gbgroup.comConstructionNot identifiedAug 14, 2026
Quest Personal Care Global qpcglobal.comManufacturingUnited KingdomAug 12, 2026
EduSpa Parkmungak eduspa.comEducationSouth KoreaAug 7, 2026
Primary Eye Care primaryeyecareneworleans.comNot identifiedUnited StatesAug 7, 2026
Mike Graham Heating, Air Conditioning & Plumbing mgpcomfort.comNot identifiedUnited StatesAug 6, 2026
Performance Alloys painc.comNot identifiedUnited StatesAug 6, 2026
Chengdu Super Love Technology baicizhan.comEducationChinaAug 4, 2026
TUI China tui.cnHospitalityChinaAug 4, 2026
Lamont Pridmore lamontpridmore.co.ukFinancial ServicesUnited KingdomAug 3, 2026
Moore Bradley Myers Law Firm mbmlawsc.comLegalUnited StatesAug 3, 2026

Showing the 20 most recent of 669. Browse recent data breaches for more.

DragonForce leak sites

Addresses we've seen DragonForce publish victims from. Any .onion address needs the Tor Browser.

  • z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
  • dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion
  • srpw5frlbymkcarik47ig7zyr6uj7rrxm4fsxdssl5ksyyiksnozy3id.onion
  • xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion
  • ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion
  • fwsm2w7jz24gt6p4bjfo6iydksbdf4getctwc2z7ammhch2dyt27drqd.onion
  • hdwnpou7c2m6whq4vg4zubj5vpd2n565lufinzcktbhsld6gpejdxsad.onion
  • 5n5yhwaytfejyrwglmi6asui3btzo6qnxic3lahxklkt3c6vtg4ticqd.onion
  • nukxck5zczmf4xjip4jbyqn7ezq5p2xbexfq6tsakdkhsxqpkb6wxbyd.onion
  • iczam6k5qp4ze2yjbg2u7p6qafoydoeqywheicwog4pujrneguwbnlid.onion
  • 34h7wxmymzntkid2acdak2glyhrdeekne4rnplgfumvwcxfmheu2z2yd.onion
  • owedofbzetfocjowznfhgjmlwqbzgf4psm7clquqajhuymdou7qvnayd.onion
  • 6faacf2xcsudop4yjvxmx23krl7jtnzue34oajh4plotv6kvnkd7jtqd.onion
  • l3ljwblw3oufuiizokjwi6btnidco3um6a7u3p5wzz22eddkswi2irqd.onion
  • 5hj4iu4yagandv7erohuuy72lc5ycyhu4vnxeggsmkbh6hqxq3lr6had.onion
  • d4dywhfvqmhtfjil3oiurj7tvowsp75chymxm6jqfjsxv2k42voguvad.onion
  • boimv4vphy6whfambjcya5lq2yko4gvhqbgakar6btopuj36zsrm6vqd.onion
  • dg566uimdj2zcbo6oidl2ckawoamnbz6kjudkwx7hfh2cnyffz3hwlyd.onion
  • y2i5ar2nxbqjpryvcwfho2pou6nvfgnh2vwpieo2oyl47uhqtbw4naqd.onion
  • mlg7uog6qxgflhotqvjbxifcwlktil4a3h7oefrq46bh6pkiszhxywyd.onion
  • mnnpffg2ha4bugkgikeycy7n5a62kibyl7ztyxbnrtxsjecz6q4rmsqd.onion
  • 7p4fwym5bz3teluk4jiwfqqapskykfnj3luy3p2t5jzv7tadwkulkrqd.onion
  • uioan6yzxl4d5h4l7henupwgsouh44kg3qmfxsi4tv7ffchtvbc7zfqd.onion
  • olvcyqyaebgbozw3vjbtekyrrwfbjvtqwr7agketxsz5ps4cqezxdwid.onion
  • 37liqfzmm2smh34imw4u4lqdjbbv6ceyhqucjcm4i2363alcbikzmcqd.onion

DragonForce questions

Is DragonForce still active?

Yes. DragonForce posted its most recent victim on September 7, 2026. That's 12 victims in the last 30 days.

How many victims has DragonForce claimed?

DragonForce has named 669 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 380 of them were posted in the last 12 months.

When did DragonForce first appear?

The first victim we recorded for DragonForce was posted on April 6, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does DragonForce target?

Manufacturing accounts for the most victims we can classify, with 121. Construction follows at 69. We could identify a sector for 453 of 669 victims, so treat this as the shape of the targeting rather than a full census.

Has DragonForce already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.