Skip to content
Ransomware

Amplesurveyor.com targeted by Dragonforce ransomware group

The Dragonforce ransomware group has published approximately 79.46 GB of data on its leak site, claiming it belongs to amplesurveyor.com.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Dragonforce
  • Country: United States
  • Sector: Professional Services
  • Announcement date: July 7, 2026

Dragonforce claims data breach at amplesurveyor.com

The Dragonforce ransomware group has published a listing on its leak site claiming responsibility for a data breach targeting amplesurveyor.com. According to the announcement made on July 7, 2026, the threat actor group alleges they have successfully exfiltrated a significant volume of data from the organization.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In this model, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to threaten its public release. By publishing stolen data, these groups aim to damage the victim's reputation and force compliance with ransom demands. While the specific details of the breach remain unconfirmed by the victim, the threat actor's public claim highlights the growing risks faced by professional service providers.

Details of the alleged attack

The Dragonforce group has listed amplesurveyor.com on its dedicated leak site, alleging a successful breach of the company's digital infrastructure. The group claims that the data associated with this incident was obtained on July 6, 2026, just one day before the announcement was made public on their platform.

The announcement identifies the target as a firm operating within the professional services sector. The timing of the leak, occurring almost immediately after the alleged acquisition of data, is a common pattern in ransomware operations designed to maximize psychological pressure on the target organization.

Data volume and content

Regarding the content of the alleged leak, the Dragonforce group has provided limited information. While the total volume of the data is specified, the group has not provided any specific details regarding the nature or the specific types of data contained within the stolen files.

  • Total claimed data size: 79.46 GB

The listing does not specify the number of files involved or the specific categories of information that were compromised. Consequently, the exact contents of the 79.46 GB of data remain unknown at this time.

Organization profile

The target of this alleged attack, Ample Surveyor Services Limited, is a property and construction consultancy firm based in Hong Kong. The company provides professional services in property valuation and construction projects, serving clients within the real estate and infrastructure development sectors.

Impact assessment and industry risks

The actions taken by the Dragonforce group may negatively impact the entity's operational continuity and commercial reputation. While the specific nature of the leaked data remains unclear, it is possible that it includes client contracts, project details, or employee information typical of a consultancy firm. Such a breach could lead to violations of third-party obligations and potential legal consequences for the organization.

The Dragonforce group, which emerged in 2023, is reported to operate a model providing infrastructure to affiliates. This decentralized approach means that the group's influence can extend through various actors, potentially leading to a higher frequency of similar attacks. Given this operational model, the threat of subsequent attacks remains a concern for organizations in the region and sector.

Secondary risks associated with such breaches include the potential for the leaked data to be used in identity theft or targeted phishing campaigns. When sensitive business or personal information is leaked, attackers often use it to craft highly convincing social engineering attacks against employees or clients. For organizations in the professional services sector, maintaining robust defensive measures—such as multi-factor authentication, regular security awareness training, and comprehensive data encryption—is essential to mitigate the impact of such evolving threats.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories