Amla Commerce listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Technology
• Announcement date: December 17, 2025

The United States-based technology company Amla Commerce has been listed on the leak site of the ransomware group dragonforce. The threat actor group claims to have successfully conducted a cyberattack against the organization, resulting in a data breach that involves the company's core software offerings.

The dragonforce claim

According to the announcement discovered on a leak site on December 17, 2025, the dragonforce group alleges that they compromised data belonging to Amla Commerce. The group cites the date of the attack as December 16, 2025. The threat actors claim to have targeted the company's e-commerce software platforms, asserting that they have successfully exfiltrated significant amounts of information from these systems.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms through a method known as double extortion. In this model, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information, threatening to publish it publicly if their demands are not met. This tactic increases the pressure on companies due to the potential for reputational damage and regulatory scrutiny following the release of stolen data.

Details of the alleged data leak

The listing on the dragonforce leak site provides specific details regarding the volume of the data involved in the incident. The group claims that the total size of the stolen data is 8.53 GB. This information was verified through screenshots provided by the attackers on their platform.

Regarding the specific nature of the information, the listing names no specific data types. While the group alleges the data is related to the company's e-commerce software platforms, there is no detailed information available regarding the specific types of files or records contained within the 8.53 GB of data.

Organization profile

Amla Commerce is a technology company that specializes in the development of e-commerce software platforms. Their products are designed for use by mid-market and enterprise-level businesses. The company serves as the parent organization for both Artifi Labs and Znode. Their technical focus is centered on providing customizable e-commerce solutions and utilizing headless architecture to meet the needs of their clients.

Potential impact and industry considerations

This breach may pose operational risks to Amla Commerce's corporate clients and business partners. Given the services provided through the company's e-commerce platforms, there is a possibility that the leaked data includes customer or transaction records. Such an incident could lead to legal consequences under US state-level data protection laws and industry regulations. Furthermore, the fact that the dragonforce group adopts a model of providing infrastructure to affiliates suggests that the attack could have a broader supply chain impact. There is a potential for the company and its customers to be exposed to identity theft or targeted phishing attacks.

In the technology and software sector, supply chain attacks are a significant concern because a single compromise can ripple through many downstream customers. When a provider of e-commerce infrastructure is targeted, the interconnected nature of modern digital commerce means that the impact is rarely confined to the primary target. Organizations in this sector often implement defensive measures such as robust access controls, multi-factor authentication, and continuous monitoring to mitigate these risks.

To defend against such threats, organizations typically focus on securing their software development lifecycles and implementing strict data encryption protocols. Monitoring for unauthorized data exfiltration and maintaining comprehensive incident response plans are also standard practices for companies managing sensitive enterprise-level software platforms.