Parsirang listed by Dragonforce ransomware group

• Ransomware group: Dragonforce
• Country: Iran
• Sector: Agriculture and Food Production
• Announcement date: November 22, 2025

Dragonforce claims data breach against Parsirang

The Dragonforce ransomware group has announced a data leak allegedly belonging to the Iranian agro-industrial company, Parsirang. This announcement, made on a dedicated leak site, suggests that the organization's operational data may have been compromised during a cyberattack.

On November 22, 2025, the Dragonforce group listed Parsirang on its leak site, claiming a data breach. The group announced the release of approximately 10.63 GB of data, which is alleged to have been obtained from the company's systems. This event marks a significant development in the ongoing targeting of industrial sectors by ransomware actors.

Ransomware groups often utilize leak sites to exert pressure on their victims. These sites serve as a platform where attackers can post information about a victim to demonstrate the success of their breach. This tactic is frequently associated with double extortion, where attackers not only encrypt an organization's data but also threaten to release sensitive information publicly if a ransom is not paid. By publishing a victim's name and the volume of stolen data, the attackers aim to maximize the reputational and operational damage to the target.

Details of the alleged data leak

Regarding the specifics of the incident, the group has claimed to have obtained a significant volume of information. The total amount of data mentioned in the announcement is approximately 10.63 GB. While the volume of the data is specified, the group has not provided specific details regarding the exact content of the alleged leaked files.

It is assessed that the 10.63 GB of files may contain operational and commercial information belonging to the company. However, the listing names no specific data types within the provided details. In such scenarios, the contents of a breach can range from internal communications to sensitive business records, but without further disclosure from the threat actor, the exact nature of the files remains unconfirmed.

Potential implications of the breach

This alleged data breach may create negative impacts on Parsirang's commercial operations and corporate confidentiality. If the leaked data includes employee information or supply chain details, it could lead to secondary risks such as targeted phishing attacks or corporate espionage. Such secondary attacks often follow a primary breach, as stolen information provides the necessary context for attackers to craft highly convincing social engineering campaigns.

About Parsirang

Parsirang is a large Iranian agro-industrial company. It focuses primarily on egg production while also operating in the fields of feed production, olive farming, and compost fertilizer. Given the company's position in the agriculture and food sector, maintaining the security of its digital infrastructure is vital for its operational continuity.

Analysis and sector considerations

The nature of this attack highlights the risks faced by large-scale industrial entities. Given that the Dragonforce group operates with a model that provides infrastructure to affiliates, there is a possibility that such attacks may be coordinated across a wider network. This model allows ransomware groups to scale their operations by providing the necessary tools and hosting to various affiliates, increasing the overall threat landscape.

Considering the company's position in the agriculture and food sector, security measures may need to be reviewed to ensure operational continuity. For organizations in this sector, protecting the integrity of supply chain data and operational workflows is essential. General defensive steps for organizations facing such threats often include implementing robust identity and access management, maintaining offline backups, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors.