Dragonforce ransomware group lists rolser.com on its leak site

• Ransomware group: Dragonforce
• Country: Spain
• Sector: Retail & E-Commerce
• Announcement date: May 25, 2026

Dragonforce claims to have compromised Rolser

The Dragonforce ransomware group has officially listed the Spanish company Rolser on its dedicated leak site. According to the announcement made on May 25, 2026, the threat actor group claims to have successfully executed a cyberattack against the organization, resulting in a significant data breach. The group alleges that the intrusion occurred on the same day the announcement was posted, May 25, 2026.

In typical double extortion ransomware schemes, attackers do not merely encrypt a victim's systems to disrupt operations; they also focus on exfiltrating sensitive information. By threatening to release this stolen data on a public leak site, the group aims to exert maximum pressure on the victim to meet ransom demands. While the specific ransom amount has not been disclosed in the announcement, the presence of the company on the leak site indicates a high level of intent to publish the stolen assets.

The group has provided several screenshots as evidence to support their claims. These images appear to show various documents that are believed to be related to the internal operational and administrative processes of the company. The scale of the alleged theft is substantial, with the group claiming that a total of 662.69 GB of data has been made accessible to the public.

Details of the alleged data theft

The information released by the Dragonforce group suggests that the breach encompasses a wide range of internal documentation. Based on the screenshots provided in the leak site announcement, the stolen data is reported to include the following types of information:

• Administrative documents
• Operational data

The disclosure of such a large volume of data, totaling 662.69 GB, poses significant risks to the organization. When administrative and operational files are leaked, it often includes sensitive internal communications, business strategies, and potentially the personal information of both employees and customers. Such leaks can lead to secondary consequences, such as targeted phishing attacks where malicious actors use the stolen information to craft highly convincing messages to deceive employees or clients.

About Rolser

Rolser is a Spain-based company that specializes in the manufacturing of household goods. The company is known for producing practical and sustainable home solutions, including items such as aluminum ladders, ironing boards, and folding shopping carts.

Potential impact and organizational risks

This incident highlights the growing threat faced by the retail and e-commerce sectors. Because the Dragonforce group reportedly operates using a model that provides infrastructure to various affiliates, it is possible that this specific attack was part of a broader, organized network of cybercriminals. This decentralized approach often makes it more difficult for security teams to track the full scope of a group's activities.

For a company based in Spain, a breach of this nature carries significant legal and regulatory implications. Under the General Data Protection Regulation (GDPR), organizations are required to protect the personal data of individuals, and failure to do so can result in severe administrative fines and legal sanctions. Beyond the legal ramifications, the exposure of internal documents can cause lasting damage to a company's commercial reputation and consumer trust.

To mitigate the risks associated with such breaches, organizations in the retail sector should prioritize robust security frameworks. This includes implementing multi-factor authentication, maintaining strict access controls, and conducting regular security audits. Furthermore, having a transparent post-breach management process is essential. Notifying the relevant authorities and affected individuals promptly can help manage secondary risks and demonstrate a commitment to data protection and accountability.