Metropolis Country Club targeted by dragonforce ransomware group

• Ransomware group: dragonforce
• Country: United States
• Sector: Hospitality
• Announcement date: June 17, 2025

Dragonforce claims data leak against Metropolis Country Club

The ransomware group known as dragonforce has announced a data leak, claiming to possess a significant amount of data belonging to Metropolis Country Club. According to an announcement made on the group's dedicated leak site, the group alleges to have successfully exfiltrated a substantial dataset from the organization's internal systems.

This incident follows a common pattern observed in modern cyberattacks, where threat actors employ double extortion tactics. In such scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release this stolen data on public leak sites, ransomware groups attempt to pressure victims into paying ransoms to prevent the exposure of confidential information.

Details of the claimed attack

The announcement regarding the breach was published on June 17, 2025. The dragonforce group claims that the attack occurred on the same day the leak was announced. According to the group's claims, the total volume of the exfiltrated data is 102.83 GB. This information was disseminated through the group's official leak site, which serves as a platform for announcing successful breaches and pressuring victims.

While the group has provided the total size of the dataset, they have not provided any specific details regarding the exact content of the leaked data. However, based on the nature of the organization, it is assessed that the 102.83 GB dataset may contain membership information, financial records, or operational documents.

About Metropolis Country Club

Metropolis Country Club is a private club located in Carmel, Indiana, United States. The facility serves its members by offering various recreational activities, including golf, racquet sports, and aquatics. In addition to these sports, the club provides its members with a golf course, dining amenities, and event hosting services.

Potential risks and organizational implications

The actions taken by the dragonforce group may pose several secondary risks to the organization's stakeholders. For the members and employees of Metropolis Country Club, the exposure of potentially sensitive data could lead to risks such as identity theft or targeted phishing attacks. As the group's reported model involves providing infrastructure to affiliates, the frequency and diversity of such attacks may increase across various sectors.

Because the organization is based in the United States, this breach may lead to legal consequences under state-level data protection laws and potential privacy violations. Organizations facing such incidents may be required to fulfill specific data breach notification obligations and inform all affected parties regarding the exposure of their information.

To defend against such threats, organizations in the hospitality and private club sectors often implement defensive measures such as multi-factor authentication, regular security awareness training, and robust data encryption. Monitoring for unauthorized data exfiltration and maintaining comprehensive incident response plans are also critical components of a modern cybersecurity posture designed to mitigate the impact of ransomware and data theft.