DragonForce ransomware group lists pieralisi.com on its leak site

• Ransomware group: DragonForce
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: May 27, 2026

The agricultural and food equipment manufacturer pieralisi.com has been listed on the leak site of the DragonForce ransomware group. According to an announcement made on May 27, 2026, the threat actor group claims to have compromised the organization's systems, marking a significant potential security incident for the Italian company.

The DragonForce claim

The DragonForce group has published an announcement on its leak site claiming that it has successfully exfiltrated 1.31 TB of data belonging to pieralisi.com. The group's announcement was made on May 27, 2026, which matches the date they claim the attack took place. To support their claims and exert pressure on the organization, the group has provided visual samples of various documents and spreadsheets that are alleged to be part of the company's operational processes.

Ransomware groups often utilize leak sites as a tool for double extortion. In this model, attackers not only encrypt an organization's local data to disrupt operations but also steal sensitive information to use as leverage. By threatening to release stolen data publicly, the group aims to coerce the victim into paying a ransom to prevent the exposure of confidential information. While the specific ransom demand has not been disclosed, the act of listing the organization on a leak site is a primary method used by such groups to demonstrate their capability and increase the pressure on the target.

Data involved in the alleged leak

The information provided by the DragonForce group includes screenshots that display various file samples. These samples appear to contain a variety of corporate documents, spreadsheets, and operational records. The group's goal in sharing these visual previews is to prove the legitimacy of the breach and intimidate the organization.

The listing identifies the following types of affected data:

• Corporate documents
• Operational records

The specific nature of the files remains unconfirmed, as the group has not provided a full inventory of the stolen data beyond these visual samples. No information was given regarding the specific file count or the exact contents of the 1.31 TB of data.

About Pieralisi

Pieralisi is a leading Italian company specializing in the production of equipment for the extraction and separation of liquids using centrifugal force. The company is particularly renowned for its olive oil extraction machinery, decanter centrifuges, and separators. Given its specialized role in the agricultural and food production sector, the company's operational data is often highly sensitive.

Analysis and potential implications

The alleged leak may pose a significant risk to the company's intellectual property and trade secrets. For a manufacturer specializing in complex centrifugal machinery, the loss of operational records and corporate documents could result in the exposure of proprietary processes or strategic business information. Furthermore, because the company is based in Italy, the leaked data may fall under the scope of the European Union's General Data Protection Regulation (GDPR).

If employee or customer data is involved in the breach, secondary risks could emerge, such as identity theft or targeted phishing attacks against the individuals whose information was compromised. The DragonForce group reportedly employs a model of providing infrastructure to affiliates, which means the nature and sophistication of such attacks may vary depending on the specific actor involved.

In the wake of such incidents, organizations typically face several critical responsibilities. They may need to fulfill data breach notification requirements mandated by regional laws and inform all affected parties. To defend against such threats, organizations in the manufacturing and food production sectors often focus on strengthening their perimeter defenses, implementing robust access controls, and maintaining comprehensive backup strategies to mitigate the impact of encryption-based attacks.