Conrad Capital Management listed by Dragonforce ransomware group

• Ransomware group: Dragonforce
• Country: United States
• Sector: Financial Services
• Announcement date: March 18, 2026

Dragonforce claims data breach at Conrad Capital Management

The ransomware group known as Dragonforce has listed Conrad Capital Management on its leak site, claiming to have successfully targeted the organization. According to the announcement made on March 18, 2026, the threat actor alleges that it has compromised the firm's data, marking a significant potential security incident for the United States-based entity.

The group's claim involves a substantial amount of information, with the announcement specifying that a dataset totaling 74.23 GB has been exfiltrated. While the group has published this information on its dedicated leak site, the specifics regarding a ransom demand or the exact file count have not been provided in the announcement.

Details of the alleged attack

The threat actor known as Dragonforce is understood to have emerged in 2023. Based on reports regarding its operational model, the group is known to operate by providing infrastructure and branding to various affiliates, a method often seen in modern ransomware ecosystems. In this instance, the group alleges that it has compromised the data of Conrad Capital Management, a firm operating within the financial services sector.

The announcement, which is categorized as a data leak, asserts that the breach occurred on March 18, 2026. This type of activity is a hallmark of double extortion tactics, where attackers not only encrypt an organization's systems but also steal sensitive information to pressure the victim into paying a ransom to prevent the public release of the stolen data.

Data types involved in the leak

The announcement states that the leaked data includes sensitive information belonging to the firm's clients. According to the group's claims, the exfiltrated information consists of the following:

• Customer personal information
• Financial data

The exposure of such specific datasets highlights the high-value nature of the financial services sector, which often serves as a primary target for cybercriminals seeking to exploit sensitive personal and monetary details.

About Conrad Capital Management

Conrad Capital Management is an independent investment advisory firm that was established in 1998. The firm provides a variety of financial advice and investment management services to both individual and institutional investors. Their professional expertise is concentrated in several specialized areas, including fixed income portfolio management, alternative investments, and retirement planning.

Potential impact and security implications

The alleged breach may increase the risk of identity theft and fraud for the firm's clients. The exposure of financial data could damage the firm's reputation and may lead to legal consequences under relevant US state laws and federal regulations. Given the operational model of the Dragonforce group, it is possible that the exfiltrated data could be utilized for secondary attacks or targeted phishing campaigns.

When organizations face such threats, they may be required to fulfill data breach notification obligations and inform the affected parties. In the financial sector, maintaining robust security posture is critical to protecting client trust. Common defensive steps for organizations in this sector involve implementing multi-factor authentication, maintaining rigorous patch management protocols, and conducting regular employee training to recognize social engineering attempts. Furthermore, continuous monitoring of network traffic and data egress can help detect unauthorized exfiltration attempts before large volumes of data are compromised.