Moncaro listed on DragonForce ransomware leak site

• Ransomware group: DragonForce
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: March 16, 2025

Moncaro, an Italy-based company operating within the agriculture and food production sector, has been listed on the leak site of the ransomware group known as DragonForce. The listing, which was discovered on March 16, 2025, follows an alleged cyberattack targeting the organization. The threat actor claims to have successfully obtained data belonging to the cooperative.

The alleged attack and group claims

The threat actor known as DragonForce has officially listed Moncaro on its dedicated leak platform. According to the information provided by the group, the institution was subjected to a cyberattack on March 15, 2025. The announcement was subsequently identified on the group's leak site on March 16, 2025. Through this listing, the group claims to have gained access to and obtained data belonging to the organization.

Ransomware groups often utilize leak sites as a tool for double extortion. In this model, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish stolen data on public platforms, the attackers aim to pressure the victim into paying a ransom to prevent the release of the information. This tactic significantly increases the pressure on the target organization, as the threat of a public data breach can lead to severe reputational and legal consequences.

Information regarding the leaked data

At this stage, there is no information provided regarding the nature or the specific scope of the allegedly leaked data. The available evidence, such as the screenshot associated with the claim, only displays a verification screen used to access the group's leak site. Consequently, the specific types of files or the volume of data involved remain unknown.

• No specific data types have been identified in the listing.

About Moncaro

Moncaro is an agricultural cooperative based in the Marche region of Italy. The organization specializes in viticulture and winemaking, focusing its operations on the preservation of local grape varieties. Furthermore, the company's mission includes the sustainability of the region's agricultural heritage.

Potential impacts and industry risks

This claim may create negative impacts on the organization's operational continuity and commercial reputation. Because Moncaro is an Italy-based entity, any potential data breach may lead to legal sanctions under the European Union's General Data Protection Regulation (GDPR). The regulatory framework of the GDPR imposes strict requirements on how organizations handle and protect personal data, and failures in data security can result in significant penalties.

If information belonging to employees or business partners has been leaked, secondary risks such as identity theft or targeted phishing attacks may be observed. Such attacks often follow a breach, as criminals use the stolen information to craft highly convincing fraudulent communications to deceive individuals or other businesses.

The DragonForce group operates with a model that provides infrastructure to affiliates. Because of this decentralized approach, the methods and the scope of attacks may vary depending on the specific affiliate involved. For organizations in the agriculture and food production sector, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of initial access via phishing or other common attack vectors.