City of Keene, NH listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Government & Defense
• Announcement date: July 11, 2025

The City of Keene, NH has been listed on the leak site of the ransomware group known as dragonforce. This announcement, made by the threat actor group, follows a claim that the institution's networks were successfully accessed.

The claimed attack and threat

On July 11, 2025, the dragonforce group published a leak announcement regarding the City of Keene, NH. According to the group's claims, they managed to gain access to the institution's networks and obtained data during the intrusion. The group has issued threats to publish the institution's data if their demands are not met.

Ransomware attacks often follow a pattern of double extortion, where threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive information. By threatening to leak this data on public platforms, attackers increase the pressure on the victim to pay a ransom. This method leverages the fear of reputational damage and legal repercussions to coerce the target organization.

Details regarding the leaked data

Regarding the specific contents of the alleged breach, the group has not provided any information or screenshots regarding the nature of the leaked data. No specific details concerning the volume of files or the total size of the data have been disclosed in the announcement.

• No data types were specified in the listing.

In many cyberattack scenarios, the lack of immediate transparency from threat actors leaves organizations and the public in a state of uncertainty. Without specific details or evidence, it remains difficult to determine the exact scope of the compromise until further evidence is provided by the attackers or a forensic investigation is completed.

About the City of Keene, NH

Keene is a city located in Cheshire County, New Hampshire, United States. Serving as the county seat, the city is home to educational institutions such as Keene State College and Antioch University New England.

Risk assessment and implications

This incident suggests a risk of exposure for citizen data or administrative records within the City of Keene, NH. Such leaks targeting public institutions may create a basis for identity theft and social engineering attacks. Furthermore, there is a secondary risk that the leaked data could be utilized by other threat actors in future campaigns.

The dragonforce group is noted for having limited public information available; however, it is reported that the group adopts a model of providing infrastructure to affiliates. This model allows various actors to conduct attacks using the group's established framework and resources.

For public sector organizations, such incidents often trigger significant regulatory requirements. In accordance with US state laws and federal regulations, the institution may be required to fulfill data breach notification obligations to the affected individuals and relevant authorities. To defend against such threats, organizations in the government and defense sector typically focus on robust network segmentation, continuous monitoring, and comprehensive employee training to mitigate the risks of unauthorized access and data exfiltration.