Dragonforce ransomware group lists milliondollarbabyco.com on its leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: April 14, 2026

Dragonforce claims data exfiltration from Million Dollar Baby Co.

The Dragonforce ransomware group has listed the children's furniture manufacturer Million Dollar Baby Co. on its leak site. According to the threat actor, the group has successfully exfiltrated 161.83 GB of data from the organization's network.

The listing appeared on the group's platform on April 14, 2026. The threat actor claims to have gained unauthorized access to the company's network, leading to the alleged theft of a significant volume of information. This type of public listing is a common tactic used by ransomware groups to exert pressure on an organization, often as part of a double extortion strategy where stolen data is used as leverage to compel payment.

In many modern ransomware campaigns, groups utilize leak sites to host stolen information or announcements of upcoming leaks. This method serves to damage the victim's reputation and create urgency. While the group's primary goal is often financial gain, the public nature of these claims can have widespread implications for the targeted company and its stakeholders.

Details of the alleged data breach

The information provided by the Dragonforce group indicates that the volume of the allegedly exfiltrated data amounts to 161.83 GB. This figure represents the total size of the data the group claims to have stolen during their operation.

Despite the specific mention of the data size, the group has not provided a detailed breakdown regarding the specific types of data involved. The listing does not specify whether the information includes personal records, financial documents, or other sensitive corporate files. Consequently, the exact nature and content of the stolen data remain unconfirmed and unspecified by the threat actor.

About Million Dollar Baby Co.

Million Dollar Baby Co. is a family-owned business that was founded in 1990. The company specializes in the manufacturing and sale of children's furniture. It manages a diverse portfolio of brands, including Babyletto, daVinci, Nursery Works, and Namesake. The organization is widely recognized for its focus on eco-friendly designs within the industry.

Potential risks and industry implications

The alleged breach may pose significant risks to the organization's operational processes and customer trust. For a company operating in the retail and e-commerce sector, maintaining the integrity of data is vital for sustaining consumer confidence. Furthermore, as a United States-based company, potential data breaches could lead to legal consequences under state-level privacy laws and federal regulations.

The publication of allegedly stolen data can increase secondary risks, such as identity theft or targeted phishing attacks directed at employees and customers. Additionally, the company's relationships with various supply chain partners may be negatively impacted by such a breach. Given the complexity of modern supply chains, a compromise in one organization can create ripple effects throughout its network of partners.

It is also important to note that the Dragonforce group reportedly employs a model that provides infrastructure to various affiliates. Because of this decentralized approach, the possibility that the attack was carried out by different actors working under the group's umbrella should be considered. To defend against such threats, organizations often implement multi-layered security strategies, including robust network monitoring, strict access controls, and regular employee training to mitigate the risk of unauthorized access and data exfiltration.