Perpetuuiti data allegedly listed by Dragonforce ransomware group

• Ransomware group: Dragonforce
• Country: India
• Sector: Technology
• Announcement date: February 5, 2026

Dragonforce claims to have targeted Perpetuuiti

The Dragonforce ransomware group has published a leak announcement claiming to have targeted Perpetuuiti, a technology company based in India. According to the announcement posted on the group's leak site on February 5, 2026, the group alleges that various files belonging to the organization's IT systems have been compromised. This incident involves a significant volume of data, with the group claiming that approximately 594.3 GB of information has been exfiltrated from the victim's systems.

Ransomware leak sites serve as a platform for threat actors to exert pressure on victims through public exposure. In many modern cyberattacks, groups employ a tactic known as double extortion. In this model, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information and threaten to release it publicly if a ransom is not paid. This increases the pressure on the victim, as the threat shifts from mere operational downtime to the permanent exposure of proprietary and sensitive information.

The scope of the alleged data leak

The data allegedly leaked by the Dragonforce group is reported to be extensive, covering various critical aspects of the organization's digital infrastructure and business operations. While the presence of personal data cannot be confirmed at this stage, the group claims to have accessed a wide array of technical and administrative files. The alleged breach includes:

• Software source codes
• Configuration and installation files
• Backup copies of information systems
• Database structures and dumps
• Financial documentation
• Administrative documentation
• Operational documentation
• Technical documentation

The exposure of such diverse data types suggests a deep level of access into the target's environment. The inclusion of configuration files and database dumps is particularly significant for the security posture of an organization, as these files often contain the blueprints of a network and the core data used by applications.

About Perpetuuiti

Perpetuuiti is a technology company that provides enterprise process automation, IT operations management, and digital transformation solutions. The organization specializes in developing software products in the fields of AI-driven automation and system continuity. Given its focus on automation and digital transformation, the company operates at the intersection of complex software development and critical IT infrastructure management.

Potential risks and industry implications

The alleged leak may pose significant risks to Perpetuuiti's intellectual property and operational continuity. The exposure of software source codes and database dumps could potentially lead to secondary attacks or supply chain vulnerabilities within the organization's systems. When source code is compromised, it can provide attackers with a roadmap to identify further vulnerabilities in the software products provided to clients.

Furthermore, because the organization is based in India, the incident may trigger legal processes under relevant data protection regulations. The specific impact on the organization's reputation and legal standing will depend on the nature of the data and the findings of subsequent investigations. If the presence of personal data is eventually confirmed, the risks could expand to include identity theft and targeted phishing attacks against the organization's employees or clients.

In the technology sector, organizations often implement defensive measures to mitigate such risks. These include robust encryption for data at rest and in transit, strict access controls, and continuous monitoring of network activity. Additionally, maintaining offline, immutable backups is a standard practice to ensure system continuity in the event of a ransomware attack. Because the Dragonforce group is known for providing infrastructure to affiliates, the scope of such leaks can sometimes expand, increasing the complexity of the threat landscape for the targeted entity.