Dragonforce ransomware group lists rubbermill.com on its leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Manufacturing
• Announcement date: September 6, 2026

Dragonforce claims to have leaked RubberMill, Inc. data

The ransomware group known as Dragonforce has announced the publication of a significant dataset on its leak site, which the group claims belongs to the United States-based manufacturing company, RubberMill, Inc. According to the announcement made on September 6, 2026, the group has released approximately 340.52 GB of data, consisting of roughly 296,000 files. This incident is part of the growing trend of double extortion, where threat actors not only encrypt an organization's systems but also steal sensitive information to use as leverage for ransom demands or to damage the victim's reputation through public leaks.

The group claims that the breach occurred around August 15, 2026. The reported incident reportedly involved the compromise of corporate systems, leading to the unauthorized access and subsequent exposure of sensitive engineering data and other internal records. While the group has published this information on their leak site, the exact nature of the initial entry point remains unconfirmed.

The scope of the alleged data leak

The data allegedly exfiltrated by Dragonforce is extensive and covers various aspects of the company's operations, ranging from technical engineering files to sensitive personal information. The group claims that the leaked dataset includes a variety of high-value information types that could be used for various malicious purposes. The contents of the alleged leak reportedly include:

• Employee HR data
• Credit card information
• Social Security Numbers (SSN)
• Engineering drawings
• Corporate email archives
• Financial data

Beyond these categories, the group also claims the data contains disk images, AES passwords, tax forms, and sales analysis data. Such a broad spectrum of information—ranging from technical CAD files to personally identifiable information (PII)—represents a significant risk to both the organization and the individuals whose data is involved.

About RubberMill, Inc.

RubberMill, Inc. is a contract manufacturer specializing in the production of non-metallic components. The company serves several critical industries, including the appliance, HVAC, automotive, and heavy equipment sectors. Notably, the company holds ISO 9001:2015 certification and produces components according to military specifications, which indicates that they are an integral part of the defense sector supply chain.

Potential impact and industry implications

The exposure of this data carries multifaceted risks. For the employees of RubberMill, the leak of Social Security Numbers, tax forms, and other PII poses a direct risk of identity theft. For the company itself, the exposure of engineering drawings and potential military specifications could severely impact its trade secrets and compromise the security of the defense supply chain. Given that the company operates within the United States, this incident may lead to significant legal consequences under various state laws and federal regulations regarding data protection and breach notification.

Furthermore, the Dragonforce group's operational model—which involves providing infrastructure to various affiliates—suggests that this data could be utilized by multiple different actors in secondary attacks or highly targeted phishing campaigns. For a company with ISO certifications and defense contracts, such an incident may lead to a significant loss of trust within the industrial and defense sectors.

In general, organizations in the manufacturing and defense sectors can mitigate such risks by implementing robust security frameworks, such as multi-factor authentication (MFA), strict access controls for engineering data, and continuous monitoring of network traffic. Protecting the integrity of the supply chain requires a proactive approach to cybersecurity to prevent the unauthorized exfiltration of intellectual property and sensitive personnel records.