Dragonforce claims data breach against Dynex/Rivett

• Ransomware group: Dragonforce
• Country: United States
• Sector: Manufacturing
• Announcement date: March 18, 2026

Dragonforce claims data breach against Dynex/Rivett

The ransomware group known as Dragonforce has listed Dynex/Rivett on its leak site, claiming to have exfiltrated a significant amount of data from the organization. This announcement, which surfaced on March 18, 2026, marks a new potential incident for the manufacturing sector, as the group alleges they have successfully breached the company's systems.

Details of the alleged attack

According to the announcement posted on the group's platform, the attack was claimed to have occurred on March 18, 2026. The Dragonforce group alleges that they have obtained a dataset totaling 58.49 GB from the company's internal systems. This type of announcement is a common tactic used by modern ransomware groups, often referred to as double extortion, where the threat actor not only encrypts data but also threatens to leak sensitive information to pressure the victim into paying a ransom.

The listing remains active on the group's platform, serving as a public claim of the breach. While the group has publicized the volume of the stolen information, they have not provided specific details regarding the nature of the leaked data or the specific files involved. The announcement focuses primarily on the scale of the exfiltration rather than the content itself.

Data involved in the breach

The listing names no specific data types or individual files that have been compromised.

About Dynex/Rivett

Dynex/Rivett Inc. is a manufacturer specializing in high-pressure hydraulic components and systems. Their production portfolio is diverse, including essential items such as piston pumps, motors, and valves. These products are critical components utilized in demanding and high-stakes industries, including oil and gas, aerospace, and heavy machinery.

Potential risks and industry implications

The claims made by the Dragonforce group may pose significant risks to the company's operational continuity and intellectual property rights. Because the alleged leaked data could potentially contain sensitive information regarding the company's manufacturing processes, technical schematics, or trade secrets, the impact could extend beyond mere data privacy concerns into the realm of industrial espionage.

Furthermore, as a United States-based entity, a potential data breach could lead to complex legal consequences under state-level privacy laws and various sectoral regulations. There is also the possibility that the leaked data could be utilized in secondary attacks or for corporate espionage activities by other malicious actors.

Dragonforce, which emerged in 2023, reportedly operates a model of providing infrastructure to affiliates. This organizational structure may indicate a potential for diversified attack vectors, as the group's methodology allows for a wider range of targets and techniques. For organizations in the manufacturing sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps for such organizations include implementing strict access controls, maintaining offline backups, and conducting regular security audits to protect sensitive technical schematics and proprietary manufacturing processes from unauthorized exfiltration.