
DragonForce
Data as of August 16, 2026.
Credential exposure before the attack
19.3% of DragonForce victims whose domain we can identify (127 of 659) had employee credentials leak in the 12 months before DragonForce named them as a victim.
We don't know whether any of these credentials were how DragonForce gained initial access.
What industries DragonForce targets
Sector identified for 446 of 659 victims.
| Manufacturing | 117 | |
| Construction | 68 | |
| Financial Services | 48 | |
| Healthcare | 34 | |
| Technology | 29 | |
| Legal | 26 | |
| Logistics | 23 | |
| Education | 17 |
Where the victims are located
Country identified for 459 of 659 victims.
| United States | 206 | |
| United Kingdom | 40 | |
| Germany | 27 | |
| Canada | 22 | |
| Italy | 15 | |
| Australia | 14 | |
| France | 10 | |
| Switzerland | 9 |
Most recent DragonForce victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| GB Group gbgroup.com | Construction | Not identified | Aug 14, 2026 |
| Quest Personal Care Global qpcglobal.com | Manufacturing | United Kingdom | Aug 12, 2026 |
| EduSpa Parkmungak eduspa.com | Education | South Korea | Aug 7, 2026 |
| Primary Eye Care primaryeyecareneworleans.com | Not identified | United States | Aug 7, 2026 |
| Mike Graham Heating, Air Conditioning & Plumbing mgpcomfort.com | Not identified | United States | Aug 6, 2026 |
| Performance Alloys painc.com | Not identified | United States | Aug 6, 2026 |
| Chengdu Super Love Technology baicizhan.com | Education | China | Aug 4, 2026 |
| TUI China tui.cn | Hospitality | China | Aug 4, 2026 |
| Lamont Pridmore lamontpridmore.co.uk | Financial Services | United Kingdom | Aug 3, 2026 |
| Moore Bradley Myers Law Firm mbmlawsc.com | Legal | United States | Aug 3, 2026 |
| RUS Industrial rusindustrial.com | Construction | United States | Aug 3, 2026 |
| Katathani Phuket Beach Resort katathani.com | Hospitality | Thailand | Jul 28, 2026 |
| Deluxe Medical Supply deluxemedical.com | Healthcare | United States | Jul 27, 2026 |
| ID Engineering & Services id-engineering.com | Manufacturing | Germany | Jul 27, 2026 |
| Syntron Bioresearch syntron.net | Healthcare | United States | Jul 27, 2026 |
| Koshkaryan Law Group koshlaw.com | Legal | United States | Jul 23, 2026 |
| One Community Federal Credit Union onecommunityfcu.org | Financial Services | United States | Jul 22, 2026 |
| NewNet newnetsa.com | Technology | Colombia | Jul 20, 2026 |
| Kee Wah Bakery keewah.com | Manufacturing | China | Jul 17, 2026 |
| Metro Design Cente metrodesigncenter.com | Not identified | United States | Jul 17, 2026 |
Showing the 20 most recent of 659. Browse recent data breaches for more.
DragonForce leak sites
Addresses we've seen DragonForce publish victims from. Any .onion address needs the Tor Browser.
z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.oniondragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onionsrpw5frlbymkcarik47ig7zyr6uj7rrxm4fsxdssl5ksyyiksnozy3id.onionmydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vtb7yfm5ypzo6id.onionfwsm2w7jz24gt6p4bjfo6iydksbdf4getctwc2z7ammhch2dyt27drqd.onionhdwnpou7c2m6whq4vg4zubj5vpd2n565lufinzcktbhsld6gpejdxsad.onion5n5yhwaytfejyrwglmi6asui3btzo6qnxic3lahxklkt3c6vtg4ticqd.onionnukxck5zczmf4xjip4jbyqn7ezq5p2xbexfq6tsakdkhsxqpkb6wxbyd.onioniczam6k5qp4ze2yjbg2u7p6qafoydoeqywheicwog4pujrneguwbnlid.onion34h7wxmymzntkid2acdak2glyhrdeekne4rnplgfumvwcxfmheu2z2yd.onionowedofbzetfocjowznfhgjmlwqbzgf4psm7clquqajhuymdou7qvnayd.onion6faacf2xcsudop4yjvxmx23krl7jtnzue34oajh4plotv6kvnkd7jtqd.onionl3ljwblw3oufuiizokjwi6btnidco3um6a7u3p5wzz22eddkswi2irqd.onion5hj4iu4yagandv7erohuuy72lc5ycyhu4vnxeggsmkbh6hqxq3lr6had.oniond4dywhfvqmhtfjil3oiurj7tvowsp75chymxm6jqfjsxv2k42voguvad.onionboimv4vphy6whfambjcya5lq2yko4gvhqbgakar6btopuj36zsrm6vqd.oniondg566uimdj2zcbo6oidl2ckawoamnbz6kjudkwx7hfh2cnyffz3hwlyd.oniony2i5ar2nxbqjpryvcwfho2pou6nvfgnh2vwpieo2oyl47uhqtbw4naqd.onionmlg7uog6qxgflhotqvjbxifcwlktil4a3h7oefrq46bh6pkiszhxywyd.onionmnnpffg2ha4bugkgikeycy7n5a62kibyl7ztyxbnrtxsjecz6q4rmsqd.onion7p4fwym5bz3teluk4jiwfqqapskykfnj3luy3p2t5jzv7tadwkulkrqd.onionuioan6yzxl4d5h4l7henupwgsouh44kg3qmfxsi4tv7ffchtvbc7zfqd.onionolvcyqyaebgbozw3vjbtekyrrwfbjvtqwr7agketxsz5ps4cqezxdwid.onion37liqfzmm2smh34imw4u4lqdjbbv6ceyhqucjcm4i2363alcbikzmcqd.onionhv2r56gre76aivjqlmwz3so57cskduhqig3u53riwpqhdijkgawtajid.onion
DragonForce questions
Is DragonForce still active?
Yes. DragonForce posted its most recent victim on August 14, 2026. That's 24 victims in the last 30 days.
How many victims has DragonForce claimed?
DragonForce has named 659 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 394 of them were posted in the last 12 months.
When did DragonForce first appear?
The first victim we recorded for DragonForce was posted on April 6, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does DragonForce target?
Manufacturing accounts for the most victims we can classify, with 117. Construction follows at 68. We could identify a sector for 446 of 659 victims, so treat this as the shape of the targeting rather than a full census.
Has DragonForce already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.