LiftPRO listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Manufacturing
• Announcement date: December 16, 2025

Manufacturing company LiftPRO targeted by dragonforce ransomware group

The manufacturing company LiftPRO has been listed on a ransomware leak site by the threat actor known as dragonforce. The announcement, which appeared on the group's platform, claims that the organization's data has been compromised. This development follows a pattern common in modern cyberattacks where threat actors use public leak sites to pressure victims into meeting specific demands.

Details of the claimed attack

The dragonforce group officially announced the involvement of LiftPRO via a post on their dedicated leak site on December 16, 2025. According to the group's claim, the attack occurred on the same day, December 16, 2025. The threat actors have indicated that the data associated with the organization may be published on their platform if their requirements are not met. This tactic is a hallmark of double extortion, a method where attackers not only encrypt an organization's systems but also steal sensitive information to leverage against the victim through the threat of public exposure.

In such scenarios, ransomware groups often use the threat of leaking stolen information to increase their leverage. By threatening to release proprietary data, intellectual property, or sensitive corporate information, attackers aim to cause maximum reputational and operational damage, forcing the victim to consider paying a ransom to prevent the leak.

Data and information status

Regarding the specifics of the breach, the listing does not provide any screenshots or detailed information regarding the content of the data. Furthermore, there is no information available concerning the total size of the data or the specific number of files involved. The group has not issued a ransom demand at this time, and the listing does not specify any particular data types that have been targeted.

About LiftPRO

LiftPRO is an organization with over 40 years of experience in the industry. The company specializes in providing lifting, rigging, and weighing solutions for a variety of sectors. Their expertise extends to critical industries, including transportation and military applications. In addition to manufacturing custom lifting equipment, LiftPRO provides the supply of these products and offers professional on-site training regarding their proper use.

Risk assessment and industry implications

This incident suggests that sensitive data within LiftPRO may be at risk of exposure. Because the organization provides specialized solutions to the military and transportation sectors, the potential leak of data could pose secondary risks to supply chain security. When companies serving critical infrastructure or defense-related sectors are targeted, the impact can ripple through the entire supply chain, potentially exposing vulnerabilities or sensitive operational details of their clients.

As a United States-based entity, any potential data breach involving LiftPRO may require evaluation under various state-level privacy laws and federal regulations. The legal and regulatory landscape for data protection is complex, and organizations must navigate these frameworks following a confirmed incident. Furthermore, information regarding the dragonforce group remains limited. However, their reported affiliate-based model suggests that their attack vectors may vary significantly, making them a versatile threat.

For organizations and their partners, such incidents highlight the potential for emerging risks such as identity theft or targeted phishing attacks directed at employees and clients. To mitigate these risks, organizations in the manufacturing and specialized equipment sectors often implement defensive strategies such as multi-factor authentication, rigorous patch management, and continuous monitoring of their network environments. Strengthening supply chain security through strict vendor risk management is also a critical component of modern cybersecurity posture.