Copamex listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: Mexico
• Sector: Agriculture and Food Production
• Announcement date: June 3, 2026

Copamex targeted by dragonforce ransomware group

The Mexico-based paper manufacturer Copamex has been listed on the leak site of the dragonforce ransomware group. According to an announcement made by the threat actors, the organization has been targeted in a cyberattack involving the exfiltration of sensitive information.

Claims of unauthorized access and data theft

The dragonforce group has publicly claimed to have gained access to the internal systems of Copamex. Following this unauthorized access, the group alleges that they successfully exfiltrated a significant volume of data from the organization's network. This announcement, which serves as a notification of the alleged breach, was made public by the threat actors on June 3, 2026.

In modern cybercrime, such announcements are often part of a double extortion strategy. In these scenarios, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage. By threatening to release the stolen information on public leak sites, ransomware groups attempt to pressure the victim into paying a ransom to prevent the disclosure of proprietary or sensitive information.

Details regarding the alleged data leak

While the threat actors have provided specific metrics regarding the scale of the incident, the exact nature of the stolen information remains unclear. The group has specified the total volume of the data they claim to have acquired, but they have not provided further details regarding the specific file types or the exact scope of the contents.

• Total claimed data volume: 588.71 GB

The listing does not specify the exact contents of the files or the specific types of data that were targeted during the intrusion. No information was provided regarding the specific file count or a specific ransom demand in the announcement.

About Copamex

Copamex is a prominent paper manufacturing company based in Mexico. Founded in 1928, the organization has a long-standing history in the industry. The company specializes in providing a variety of paper solutions, including writing and printing papers, specialty papers, corrugated cardboard, and kraft paper.

Potential impacts and organizational risks

This alleged data leak may create negative impacts on the organization's operational continuity and commercial reputation. Depending on the content of the leaked data, risks such as identity theft and targeted phishing attacks against employees or business partners may be observed. Furthermore, the organization may face legal obligations under Mexican data protection regulations following such an event.

The dragonforce group, which emerged in 2023, is reported to operate using a model that provides branding and infrastructure to various affiliates. This decentralized structure can make attribution and mitigation more complex for defenders. Such leaks may also jeopardize the organization's supply chain security and could lead to secondary extortion attempts against the company or its partners.

To defend against such threats, organizations in the manufacturing and production sectors often implement multi-layered security strategies. These include robust backup solutions, strict access controls, and continuous monitoring of network traffic to detect unauthorized data movement. Maintaining a strong incident response plan is also critical to managing the legal and reputational consequences that follow a data breach notification.