Encompass listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Technology
• Announcement date: March 3, 2026

Dragonforce claims data breach against Encompass

The ransomware group known as dragonforce has officially listed the technology firm Encompass on its leak site. According to the announcement posted on March 3, 2026, the group claims to have successfully conducted a cyberattack against the organization. This listing follows an alleged intrusion that the group claims took place on February 2, 2026.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In this model, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information. The threat of releasing this stolen data publicly serves as additional leverage to coerce the victim into paying a ransom. While the presence of a company on a leak site indicates a targeted attack, it is important to note that these claims are made by the threat actors themselves.

Details of the alleged data theft

The dragonforce group asserts that they have obtained a significant volume of information from the networks belonging to Encompass. According to the group's announcement, the total size of the compromised data is approximately 227.97 GB. This volume of data suggests a substantial breach of the target's digital environment.

Regarding the specific nature of the stolen information, the leak site announcement provides no specific details regarding the types of files or the exact contents of the data. The listing names no specific data types or individual files that have been compromised.

About Encompass

Encompass Solutions is a technology company that specializes in providing Epicor ERP software solutions. The firm offers a variety of services, including custom software development and process improvement services specifically designed for businesses operating within the manufacturing industry. Founded in 2001, the company provides business consulting, software implementation, and managed services to its clients.

Potential risks and industry implications

The involvement of a technology firm that provides Enterprise Resource Planning (ERP) solutions in a ransomware incident introduces significant complexities. Because ERP systems are central to business operations, there is a possibility that the leaked data may contain sensitive business information or operational processes belonging to the company's clients. This creates a potential supply chain risk, where a breach at a service provider can impact the security and data integrity of its customer base.

Furthermore, the exposure of such data can lead to various secondary risks. There is a risk that the leaked information could be utilized by malicious actors for identity theft or for conducting highly targeted phishing attacks against the organization or its clients. Additionally, such a disclosure may trigger legal obligations under various United States state laws regarding data breach notifications and privacy protections.

For organizations operating in the technology and manufacturing sectors, maintaining robust defensive postures is critical. Common defensive strategies include implementing strict access controls, maintaining offline backups, and conducting regular security audits. Organizations must also monitor for signs of unauthorized lateral movement within their networks to detect potential intrusions before data exfiltration occurs. In the event of a breach, a coordinated response involving legal, technical, and communications experts is essential to manage the resulting regulatory and operational consequences.