Egaraset listed on Dragonforce leak site following alleged data breach

• Ransomware group: Dragonforce
• Country: Spain
• Sector: Technology
• Announcement date: October 27, 2025

The Dragonforce ransomware group has listed the Spain-based technology company Egaraset on its leak site, claiming to have exfiltrated 44.49 GB of data. This announcement, made on October 27, 2025, follows an alleged intrusion that the group claims occurred on October 20, 2025.

The details of the claim

According to the announcement posted by the Dragonforce group, the organization's systems were breached, leading to the unauthorized exfiltration of a significant volume of information. The group's listing of Egaraset on their dedicated leak site serves as a public claim of the successful attack. This type of activity is characteristic of modern ransomware operations, where groups often employ double extortion tactics. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to publish it on a public leak site if a ransom is not paid.

The announcement is perceived as a direct threat to the operations of the company within the technology sector. By publicly naming the victim, the group aims to exert pressure on the organization. While the group provides infrastructure to various affiliates, the specific nature of this listing remains a significant concern for the targeted entity.

Data involved in the incident

Regarding the content of the breach, the specific types of data allegedly exfiltrated have not been disclosed by the group. The announcement provides no information regarding the specific categories or formats of the files stolen. However, the group has stated that the total volume of the data involved in this incident is 44.49 GB.

• Total data volume: 44.49 GB

The lack of specific details regarding the file types or the nature of the information contained within the 44.49 GB makes it difficult to determine the exact scope of the sensitive information compromised at this stage.

About Egaraset

Egaraset is a technology company that provides adaptable IT solutions such as ERP, financial management, and customer relationship management for small and medium-sized enterprises and religious communities. With over 20 years of experience, they serve more than 400 companies and 1,000 communities worldwide.

Potential impact and industry implications

Given that Egaraset provides critical business solutions such as ERP and financial management, the leaked data may contain sensitive information belonging to its clients and business partners. This incident could lead to legal repercussions and administrative fines under the European Union's General Data Protection Regulation (GDPR). The potential exposure of client data through a service provider creates a ripple effect of risk across the entire supply chain.

Secondary risks for the 400+ companies and 1,000 communities served by the firm may include targeted phishing attacks and identity theft. When a provider of essential business software is compromised, the downstream impact on their client base can be extensive, as attackers may use the stolen information to launch more sophisticated social engineering campaigns against the end users.

The structure of the Dragonforce group, which provides infrastructure to affiliates, may indicate that the scope of the leak could potentially expand. Furthermore, a decline in client trust and disruptions to operational continuity may be expected following such an event. Organizations in the technology sector often implement defensive measures such as multi-factor authentication, regular security audits, and robust encryption to mitigate these risks, but the scale of this alleged breach highlights the ongoing challenges faced by service providers.