Dragonforce ransomware group lists sutex.com on its leak site

• Ransomware group: Dragonforce
• Country: China
• Sector: Agriculture and Food Production
• Announcement date: April 2, 2026

Dragonforce claims to have stolen data from Sutex

The Dragonforce ransomware group has listed a significant amount of data on their dedicated leak site, claiming the information belongs to the textile company Sutex. According to the announcement made on April 2, 2026, the group asserts that they have successfully breached the organization's systems. This development follows a common pattern in modern cybercrime where threat actors use public leak sites to pressure victims into meeting ransom demands by threatening to release sensitive corporate information.

The group behind this claim, Dragonforce, is a known entity in the cyber threat landscape that emerged in 2023. This group operates using a specific business model where they provide the necessary infrastructure to various affiliates to conduct attacks. This decentralized approach often complicates attribution and response efforts, as the primary group provides the platform and tools while affiliates may carry out the actual intrusion.

Details of the alleged data breach

The announcement made by the threat actor suggests that the breach has resulted in the compromise of various documents related to the company's business operations. While the group has not provided specific details regarding the exact nature of every file, the leaked information is reported to be substantial in volume. The total size of the data allegedly compromised is stated to be 121.43 GB.

Based on the evidence provided by the group, the following types of information are reportedly included in the leak:

• Various documents related to the company's operations
• Invoice-like files

The presence of such documentation on a leak site indicates a potential exposure of internal business processes and financial records. In many ransomware scenarios, attackers utilize a