Apply Capnor listed by Dragonforce ransomware group

• Ransomware group: Dragonforce
• Country: Norway
• Sector: Manufacturing
• Announcement date: April 14, 2026

Dragonforce claims data breach against Apply Capnor

The ransomware group known as Dragonforce has listed the Norwegian manufacturing company Apply Capnor on its leak site. According to the announcement made on April 14, 2026, the group alleges that they have successfully compromised a significant amount of data belonging to the organization. The claim asserts that the volume of stolen information amounts to 1.94 TB.

Dragonforce is a ransomware entity that reportedly emerged in 2023. The group operates using a model where they provide brand and infrastructure to various affiliates to carry out attacks. This specific incident, as reported by the group, follows their established pattern of targeting organizations and subsequently listing them on their dedicated leak site to exert pressure.

Details of the alleged data theft

While the group has announced the breach, they have not provided specific details regarding the exact content of the alleged stolen data. However, based on the nature of the company's business operations, the compromised information may potentially include technical projects, industrial designs, and various forms of corporate information.

The listing currently names no specific data types or individual files within the claim.

About Apply Capnor

Apply Capnor is a technology company based in Norway that specializes in high-tech industrial services. The firm provides a wide range of solutions, including laser scanning, engineering, and 3D data management services. Their expertise extends to design, reverse engineering, and drone-assisted inspection solutions. These services are utilized across several critical industries, such as the oil, gas, marine, and automotive sectors.

Potential implications and industry risks

This incident may pose a significant risk of exposing sensitive engineering data and trade secrets belonging to Apply Capnor. Because the company is headquartered in Norway, any confirmed data breaches could fall under the scope of the General Data Protection Regulation (GDPR), which could lead to various regulatory consequences for the organization.

The publication of such data could create substantial supply chain risks for the company's partners, particularly those operating in high-stakes sectors like oil, gas, and automotive. Furthermore, the leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing campaigns against employees or clients.

The methods employed by the Dragonforce group suggest that the stolen data may be used for double extortion purposes. In double extortion, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten the victim with public disclosure unless a ransom is paid. This tactic increases the pressure on organizations to comply with demands. To defend against such threats, organizations in the manufacturing and engineering sectors often implement robust data encryption, strict access controls, and comprehensive monitoring to detect unauthorized data exfiltration.