Dragonforce claims data breach at TEXMA International Co., Ltd

• Ransomware group: Dragonforce
• Country: Taiwan
• Sector: Manufacturing
• Announcement date: October 10, 2026

Dragonforce claims data theft from TEXMA International Co., Ltd

The ransomware group known as Dragonforce has listed the Taiwan-based manufacturer TEXMA International Co., Ltd on its leak site. According to the announcement made on October 10, 2026, the threat actors claim to have successfully breached the company's systems and exfiltrated a significant amount of information.

This incident follows a common pattern in modern cyberattacks known as double extortion. In such scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive data to use as leverage. By threatening to release this information on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive corporate information.

Details of the alleged attack

The threat actor, Dragonforce, announced the breach on October 10, 2026, the same day they claim the attack occurred. The group asserts that they have gained unauthorized access to the systems of TEXMA International Co., Ltd and have obtained a total of 6.61 GB of data. While the volume of the data has been specified, the announcement did not include a specific ransom demand or a detailed file count.

The listing provides a screenshot indicating the total size of the allegedly stolen data is 6.61 GB. However, the group has not provided detailed information regarding the specific types or the exact content of the leaked data. It is suggested that the compromised information may relate to the company's operational processes, though no specific file categories were identified in the announcement.

About TEXMA International Co., Ltd

TEXMA International Co., Ltd is a textile manufacturer headquartered in Taiwan. Founded in 1975, the company specializes in the production of women's apparel, activewear, and sportswear. The organization operates under a business model where they manage orders from Taiwan while maintaining a global production network, serving as a supplier to major fashion brands on a worldwide scale.

Potential impact and industry implications

This leak may lead to the exposure of corporate data within TEXMA International Co., Ltd and could result in a loss of commercial reputation. Because the Dragonforce group is reported to operate a model that provides infrastructure to various affiliates, there is a possibility that this specific attack may have been carried out by different actors using the group's platform.

If the leaked data includes sensitive information such as supply chain details or customer contracts, it could create secondary risks for the company's business partners. Furthermore, the company may face legal obligations under the data protection regulations applicable in Taiwan. There is also a significant risk that the exposed data could be utilized for identity theft or targeted phishing attacks against the organization or its stakeholders.

For organizations operating within the manufacturing and textile sectors, such incidents highlight the importance of robust cybersecurity frameworks. Defensive strategies typically include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular offline backups of critical operational data. Additionally, monitoring for unauthorized data exfiltration and securing supply chain communications are essential steps to mitigate the risks posed by sophisticated ransomware groups.