DragonForce 2026 activity
Ransomware group. 5 reports in 5 countries: 0 confirmed, 5 claimed or disputed. Latest 27 Jul 2026.
Thailand · 
Philippines · 
Sri Lanka · 
Vietnam · 
Brazil
🎯 What sources say
- Thailand: Listed Thai resorts and manufacturers between March and September 2026. ransomware.live Thailand
- Philippines: Listed Alliance Select Foods, Panorama BPO and Trans World Trading. Ransomware.live (Philippines)
🚨 Reports
| Organisation | Country | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|---|
| ⚠️ ClaimedKatathani Phuket Beach Resort | Thailand | 27 Jul 2026 | Other | Ransomware | DragonForce | Claimed. DragonForce listed Katathani Phuket Beach Resort on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedPanorama BPO | Philippines | 1 Jun 2026 | Other | Ransomware | DragonForce | Claimed. DragonForce listed Panorama BPO on its leak site on 1 June. | Ransomware.live (Philippines)✓ 7 Nov |
| ⚠️ ClaimedSynex International | Sri Lanka | 1 Jun 2026 | Other | Ransomware | DragonForce | Claimed. DragonForce listed Synex International on its leak site. | ransomware.live✓ 8 Nov |
| ⚠️ ClaimedVietnam Fortress Tools JSC | Vietnam | 4 Apr 2026 | Manufacturing | Ransomware | DragonForce | Claimed. DragonForce listed the export-focused garden tool maker on its leak site on 4 April 2026. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedFundação Getulio Vargas (FGV) | Brazil | 2 Mar 2026 | Education | Ransomware | DragonForce | Claimed. DragonForce claimed about 1.52 TB of FGV data; FGV had not confirmed. | Capital Digital✓ 7 Nov |
Leak-site listings are claims until the organisation or authorities confirm them. Methodology