Betesan listed on DragonForce ransomware leak site

• Ransomware group: DragonForce
• Country: Türkiye
• Sector: Manufacturing
• Announcement date: February 13, 2026

DragonForce claims data breach against Betesan

The ransomware group known as DragonForce has listed the Turkish engineering firm Betesan on its dedicated leak site. According to the announcement posted on February 13, 2026, the threat actor group claims to have successfully compromised and exfiltrated a significant amount of data belonging to the organization.

The group's claim follows a pattern often seen in modern cyber extortion campaigns, where attackers target specific organizations to exert pressure through the threat of public data exposure. Such leak sites serve as a platform for ransomware groups to shame their victims and demonstrate their ability to breach corporate networks. In this instance, the group has officially announced the incident as a data leak, asserting that they have gained unauthorized access to the company's internal information.

Details of the alleged incident

The details provided by the DragonForce group regarding the breach are limited to the scale of the exfiltration. The group claims to have obtained a dataset totaling 588.02 GB. While the volume of the data is substantial, the announcement does not provide specific details regarding the nature or the exact types of the alleged leaked data; it only mentions the existence of this 588.02 GB dataset.

DragonForce is a ransomware entity that emerged in 2023. The group is recognized for employing a specific business model where they provide the necessary infrastructure and tools to various affiliates to conduct attacks. This model allows the core group to scale its operations by enabling other actors to carry out the actual intrusions while utilizing the group's established platform and resources.

Affected data types

The listing names no specific data types within the announcement.

Organization profile

Betesan is an engineering company based in Tuzla, Türkiye. The company operates within the manufacturing sector, providing specialized engineering services and solutions.

Potential risks and strategic implications

This alleged leak may pose significant risks to Betesan's operational continuity and its commercial reputation. Depending on the actual content of the leaked data, the company and its partners could face various secondary threats. These include the possibility of secondary phishing attacks or identity theft targeting the company's clients and its various supply chain partners.

Furthermore, because the company operates within Turkey, it may be required to fulfill specific legal obligations regarding data breach notifications under the KVKK (Personal Data Protection Law). The strategic sensitivity of this breach is heightened by the fact that the company's involvement spans the military and industrial sectors, making the potential exposure of sensitive information a matter of greater concern.

Given the business model utilized by the DragonForce group, there is a heightened possibility that the data could be shared or sold across various platforms. For organizations in the manufacturing and engineering sectors, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for organizations facing such threats include implementing strict access controls, maintaining offline backups, and conducting regular security audits to mitigate the impact of potential exfiltration.