Jac Vandenberg listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: February 24, 2026

Fresh produce supplier Jac Vandenberg targeted by dragonforce

The ransomware group known as dragonforce has listed the United States-based organization Jac Vandenberg on its dedicated leak site. The announcement, which appeared on February 24, 2026, constitutes a claim of a significant data breach against the company.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. The attackers then threaten to publish this stolen data on public leak sites if the ransom demands are not met. This method increases the pressure on the victim by threatening their reputation, legal standing, and relationships with partners and customers.

Details of the claimed attack

According to the announcement made by the dragonforce group on February 24, 2026, the group alleges that they have successfully compromised the systems of Jac Vandenberg. The group claims to have obtained approximately 44.28 GB of data from the company's internal infrastructure. The primary objective of such a listing on a leak site is typically to exert maximum pressure on the organization by using the threat of data exposure as leverage.

The group's operational model is notable for providing infrastructure to various affiliates. This structure suggests that while the dragonforce group provides the platform and tools, the actual intrusion and execution of the attack may have been carried out by different independent actors working under their umbrella.

Data volume and content

Regarding the specific nature of the information allegedly stolen, the available information is limited to the scale of the theft. The listing does not provide specific details regarding the nature of the leaked data; it only specifies a total data volume of 44.28 GB. No specific file types or categories of information have been identified in the announcement.

• Total claimed data volume: 44.28 GB

Implications and risks for the sector

This incident indicates that corporate data and operational information within Jac Vandenberg may be at risk of exposure. Because the company is based in the United States, a confirmed breach could trigger legal proceedings under relevant state laws and federal data protection standards. Organizations operating in the United States must navigate a complex landscape of regulatory requirements following a data compromise.

The potential impact of such a breach extends beyond the immediate organization. The company's supply chain partners and customers could be affected by secondary risks. Specifically, the exposure of corporate data can lead to targeted phishing attacks, where malicious actors use stolen information to craft convincing messages to deceive employees or clients.

For organizations in the agriculture and food production sector, maintaining robust cybersecurity posture is essential. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting thorough employee training to recognize social engineering attempts. As supply chains become increasingly digital, the interconnected nature of the industry means that a breach in one organization can create ripple effects across the entire production and distribution network.