Skip to content
Ransomware

Mopec.com listed on Dragonforce ransomware leak site

The Dragonforce ransomware group has listed the medical equipment manufacturer mopec.com on their leak site, claiming to have exfiltrated 81.69 GB of data.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Dragonforce
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: April 27, 2026

Dragonforce claims data exfiltration from mopec.com

The ransomware group known as Dragonforce has listed the American medical equipment manufacturer mopec.com on its dedicated leak site. According to the announcement made on April 27, 2026, the threat actors claim to have successfully exfiltrated a significant volume of data from the organization's systems. This listing serves as a public assertion by the group that they have gained unauthorized access to the institution's network.

In the current cyber threat landscape, ransomware groups frequently utilize leak sites to pressure victims into paying ransoms. This tactic is often associated with double extortion, where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. By publishing the names of their victims on these sites, threat actors aim to maximize the reputational damage and leverage against the targeted entity.

Details of the alleged breach

The Dragonforce group alleges that the volume of data stolen during the attack is 81.69 GB. While the group has provided a specific size for the exfiltrated information, they have not provided specific details regarding the exact nature of the data or the specific file types involved. The listing does not include a specific file count or a ransom demand.

Although the group has not explicitly detailed the contents of the stolen information, the available evidence provided by the attackers includes screenshots that display various forms and document samples. These visual samples are intended to demonstrate the validity of their claim to the public and the victim.

About mopec.com

Mopec is an American company that operates within the manufacturing sector. The organization specializes in the supply of medical equipment and laboratory products. Their product range is designed to support essential services, including pathology, histology, autopsy, and morgue services.

Potential impact and organizational risks

This incident may negatively impact the organization's operational continuity and commercial reputation. Depending on the actual content of the leaked data, secondary risks could emerge, such as identity theft or targeted phishing attacks directed at the organization's employees and customers. Such attacks often follow a breach, as stolen information can be used to craft highly convincing social engineering campaigns.

Because the organization is based in the United States, a potential data breach could trigger complex legal processes under relevant state laws and federal regulations. Organizations operating in highly regulated sectors must remain vigilant, as data breaches often necessitate compliance with specific reporting requirements to government authorities and affected parties.

The nature of this attack may reflect a broader trend in the cybercrime ecosystem. The Dragonforce group is reported to follow a model of providing infrastructure to affiliates, suggesting that this specific attack may be part of a larger, coordinated network of cybercrime activities. When threat actors operate as service providers, it can increase the frequency and sophistication of attacks across various industries.

To mitigate the risks associated with such incidents, it is often advisable for organizations to initiate a comprehensive forensic investigation. Such an investigation is essential to determine the full scope of the data breach, identify the entry point used by the attackers, and ensure that the threat has been fully remediated from the network. Continuous monitoring and robust security protocols remain critical for maintaining defense against evolving ransomware threats.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories