Edward J Kone listed on Dragonforce ransomware leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: December 16, 2025

Dragonforce claims data breach against Edward J Kone

The threat actor known as Dragonforce has listed the law firm Edward J. Kone on its leak site, alleging a significant data breach. According to the announcement, the group claims to have successfully exfiltrated a massive volume of information from the firm's internal systems. This claim is associated with an alleged attack that took place on December 16, 2025.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms through a method known as double extortion. In these scenarios, attackers do not just encrypt an organization's data to disrupt operations; they also steal sensitive information to threaten its public release. By hosting a dedicated website, these groups can create public pressure, damaging the reputation of the target organization if they do not comply with the attackers' demands.

Details of the alleged theft

The announcement made by Dragonforce provides specific details regarding the scale of the alleged intrusion, though it remains vague regarding the specific nature of the files stolen. The group claims to have obtained a dataset totaling 398.88 GB from the systems belonging to the firm. This represents a substantial amount of digital information that could potentially contain highly sensitive documentation.

Regarding the specifics of the stolen information, the provided documentation does not contain specific details regarding the nature of the data, other than the total volume of 398.88 GB. No specific file types or individual data categories were identified in the listing.

The organization profile

Edward J. Kone, P.A. is a law firm specializing in criminal defense, traffic violations, and personal injury cases. Operating in South Florida, the firm provides legal representation services to its clients. Given the nature of their work, such firms typically handle a wide array of sensitive legal documents and private client information.

Implications and sector risks

Law firms may constitute attractive targets for ransomware actors due to the sensitive legal documents and client confidentiality they maintain. The potential exposure of client information in a breach of this magnitude could lead to significant reputational damage or complex legal consequences for the firm. Because the organization is based in the United States, it may be subject to state-level data breach notification laws and specific legal obligations regarding attorney-client privilege.

Furthermore, the operational model of the Dragonforce group is noteworthy. As a group that reportedly provides infrastructure to various affiliates, the leaked data could potentially be utilized in secondary attacks or targeted phishing campaigns. When stolen data is circulated or used by affiliates, it increases the risk of follow-on exploitation against the original victim or their associated clients.

To defend against such threats, organizations in the professional services sector often implement various defensive strategies. These include maintaining robust backup solutions, implementing multi-factor authentication across all access points, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, maintaining strict access controls and monitoring network traffic for unusual data exfiltration patterns are critical components of a modern cybersecurity posture designed to mitigate the impact of ransomware and data theft.