Dragonforce ransomware group lists https://www.platinumdrywall.com/ on its leak site
The Dragonforce group has listed 63.86 GB of data on its leak site, claiming it belongs to the US-based company Platinum Drywall.
- Published
- 3 min read
- 3 min read
- Ransomware group: Dragonforce
- Country: United States
- Sector: Manufacturing
- Announcement date: February 5, 2026
Dragonforce claims data breach at Platinum Drywall
The threat actor known as Dragonforce has listed the United States-based company Platinum Drywall on its leak site. According to the group's announcement, they have successfully gained access to the organization's systems and claim to have exfiltrated a significant amount of data. This development follows a growing trend in the cyber threat landscape where ransomware groups utilize leak sites to pressure victims through public exposure of sensitive information.
The announcement was made on February 5, 2026, the same day the group claims the attack occurred. While the group has published a substantial amount of information regarding the breach, they have not provided a specific ransom demand or a specific file count. The size of the data claimed to be stolen is 63.86 GB.
Details of the alleged data theft
The Dragonforce group has provided samples of various documents to support their claims of a successful breach. These samples suggest that the stolen information is directly related to the core business operations of the company. The leaked content appears to consist of technical and administrative documents that provide insight into the company's professional activities and internal management.
Based on the information provided by the threat actor, the affected data includes:
- Commercial project documents
- Administrative records
The presence of such documents on a leak site is a hallmark of the double extortion tactic. In this model, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This creates a secondary layer of pressure, as the victim faces not just operational downtime, but also potential reputational damage and legal consequences resulting from the exposure of proprietary information.
About Platinum Drywall
Platinum Drywall is a company that has been providing drywall, metal framing systems, acoustic ceilings, and insulation services to commercial construction companies since 2001. The company specializes in structural solutions such as metal roof trusses and soundproofing for commercial projects.
Potential impact and industry implications
The alleged leak may pose significant risks to the company's commercial operations and customer data. As a US-based entity, the company may be subject to state-level data protection laws and potential legal obligations following such an incident. The exposure of this data could lead to the disclosure of trade secrets and place the company at a competitive disadvantage in the construction and manufacturing sector.
Furthermore, if employee or customer information is included in the 63.86 GB of data, secondary risks such as identity theft and targeted phishing attacks may be observed. These types of attacks often follow a breach, as criminals use the stolen personal information to craft highly convincing fraudulent communications to deceive individuals or other businesses.
It is important to note that the Dragonforce group reportedly employs a model that provides infrastructure to affiliates. Because of this decentralized approach, the specific scope and methodology of the attack may vary depending on the affiliate involved. This model makes it challenging for defenders to predict the exact tactics used in any single incident.
For organizations operating in the manufacturing and commercial construction sectors, maintaining robust cybersecurity posture is essential. General defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Monitoring for unauthorized access and ensuring that all software and systems are patched against known vulnerabilities are also critical components of a modern defense strategy.