Skip to content
Ransomware

Atcom listed on dragonforce ransomware leak site

The technology company Atcom has been listed on the leak site of the ransomware group known as dragonforce.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: dragonforce
  • Country: China
  • Sector: Technology
  • Announcement date: July 14, 2026

Atcom listed on dragonforce leak site

The technology company Atcom has been listed on the leak site of the ransomware group known as dragonforce. The group has made an announcement alleging a data breach involving the organization, marking a new potential incident in the evolving landscape of cyber extortion.

The claims made by dragonforce

The dragonforce group has listed Atcom on their leak site, alleging a data breach. This announcement follows the group's emergence in 2023. Reports indicate that dragonforce utilizes an operational model that provides infrastructure and branding to various affiliates, a method often seen in modern ransomware ecosystems. By providing the necessary tools and identity to affiliates, such groups can scale their operations significantly.

Ransomware leak sites function as a component of double extortion tactics. In these scenarios, threat actors do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information. The threat of publishing this data on a public leak site is used as leverage to pressure the victim into paying a ransom. If the ransom is not met, the group threatens to release the stolen files to the public, causing reputational and regulatory damage.

Details regarding the alleged data breach

Regarding the specifics of the incident, there is no information provided regarding the nature or content of the alleged leaked data. Furthermore, no screenshot has been made available to verify the claims. The listing names no specific data types that have been compromised.

Potential risks and secondary impacts

This incident may pose a risk of exposing the company's trade secrets or customer communication data. Given the company's focus on VoIP and IP PBX systems, the breach could potentially lead to secondary risks concerning supply chain security. If the data is published, the company's clients might be subjected to targeted phishing attacks, as attackers often use stolen corporate information to craft highly convincing fraudulent communications.

About Atcom

ATCOM Technology Co., LTD. is a technology company that manufactures VoIP products, including IP phones and IP PBX systems. They provide VoIP communication solutions for enterprises, including cloud-based, call center, and Wi-Fi supported systems.

Analysis and defensive considerations

Considering the operational model of the dragonforce group, the scope and nature of the breach remain uncertain. For organizations within the technology and communications sector, such incidents highlight the critical importance of securing the software supply chain. Because companies like Atcom provide foundational communication infrastructure, a breach can have ripple effects across their client base.

When an organization faces a potential breach, common defensive and reactive steps include initiating data breach notification procedures and conducting thorough security audits. Organizations should focus on robust identity and access management, continuous monitoring of network traffic, and ensuring that all communication hardware and software are patched against known vulnerabilities. Strengthening the security posture of VoIP and cloud-based systems is essential to mitigate the risk of unauthorized access and subsequent data exfiltration.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories