DragonForce ransomware group lists congoleum.com on its leak site

• Ransomware group: DragonForce
• Country: United States
• Sector: Manufacturing
• Announcement date: April 2, 2026

DragonForce claims to have leaked Congoleum data

The threat actor known as DragonForce has published a claim on their leak site regarding a data breach involving Congoleum.com. According to the announcement made on April 2, 2026, the group asserts that they have successfully compromised and released a significant volume of data belonging to the organization.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. If the victim refuses to pay the ransom to restore their systems, the attackers threaten to publish the stolen data online to cause maximum reputational and legal damage. This method turns a technical disruption into a long-term data privacy crisis.

The threat actor's announcement indicates that the initial compromise of the organization's environment likely occurred on June 27, 2024. This suggests that the attackers may have maintained access to the network for a considerable period before the data was eventually posted on the group's platform.

Details of the alleged data leak

The DragonForce group claims to have released a total of 113.09 GB of data. While the volume of the leak is substantial, the specific contents and the exact nature of the files remain partially obscured. The group has not provided a specific ransom demand or a detailed breakdown of the file types included in the leak.

Based on the available information, the following details describe the data involved:

• The listing names no specific data types or categories.

Visual evidence provided by the group includes various screenshots that appear to display document samples. These samples seem to relate to the operational processes of the organization. However, a comprehensive and detailed breakdown of the actual content within the 113.09 GB dataset is currently unavailable.

About Congoleum

Congoleum is a company established in 1886. The organization specializes in the development and manufacture of flooring products designed for both residential and commercial spaces. The company is headquartered in Mercerville, New Jersey, within the United States.

Potential impact and industry implications

This alleged leak may pose significant risks to the organization's operational continuity and its commercial reputation. The exposure of sensitive information belonging to employees or business partners could lead to secondary risks, such as identity theft or targeted phishing attacks against the organization's stakeholders. Because the organization is based in the United States, this incident may trigger legal obligations under relevant state laws and federal data protection regulations.

The DragonForce group is noted for operating as an infrastructure provider for various affiliates. This operational model means that attacks by such groups can trigger broader supply chain risks, as their activities can impact a wide array of interconnected businesses and partners.

For organizations operating within the manufacturing sector, such incidents highlight the necessity of robust defensive measures. Common steps for organizations to mitigate these risks include implementing strict access controls, maintaining offline backups, and conducting regular security audits. Furthermore, monitoring for unauthorized data exfiltration and ensuring compliance with regional data protection standards are essential components of a modern cybersecurity posture. As manufacturing processes become increasingly digitized, the potential for such breaches to impact the wider supply chain remains a critical concern for the industry.