Skip to content
Ransomware

Platinum Drywall Inc listed on Dragonforce leak site

The Dragonforce group has listed Platinum Drywall Inc on its leak site, claiming to possess approximately 63.86 GB of the company's data.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Dragonforce
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: February 5, 2026

Dragonforce claims data breach against Platinum Drywall Inc

The ransomware group known as Dragonforce has listed the United States-based company Platinum Drywall Inc on its leak site. According to the group's announcement, they claim to have successfully compromised the organization and are in possession of a significant amount of stolen information. This development follows a pattern often seen in modern cyber extortion, where threat actors use public leak sites to pressure victims by threatening to release sensitive information if specific demands are not met.

The group alleges that the breach occurred on February 5, 2026. While the group has announced the incident, they have not provided information regarding a specific ransom demand. In many such scenarios, ransomware groups employ a "double extortion" tactic, where they not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data to use as leverage during negotiations. By publishing a victim's name on a public leak site, these groups aim to maximize reputational damage and pressure the target into compliance.

Details of the claimed data theft

Dragonforce claims to have exfiltrated a total of 63.86 GB of data belonging to Platinum Drywall Inc. Although the exact file count was not specified in the announcement, the volume of data suggests a substantial breach of the company's digital environment. The group's announcement indicates that the stolen information is related to the company's core business operations and administrative functions.

Based on the samples provided by the attackers, the leaked information appears to include various document types that reflect the company's daily activities. The data reportedly includes:

  • Commercial construction project documents
  • Administrative and operational records

The exposure of such documents can lead to various secondary risks. For instance, the release of project details or trade secrets can facilitate targeted phishing attacks against the company or its partners. Furthermore, such leaks can create vulnerabilities within the broader supply chain, as attackers may use the stolen information to impersonate the company or its employees in future social engineering campaigns.

About Platinum Drywall Inc

Platinum Drywall Inc is a construction company based in the United States. Since 2001, the firm has been providing a wide range of services for commercial construction projects. Their expertise includes drywall installation, metal framing systems, acoustic ceilings, and insulation services. The company specializes in specific technical applications such as metal framing, truss systems, and both fire and soundproofing solutions.

Potential implications and organizational risks

The alleged leak of 63.86 GB of data poses significant risks to Platinum Drywall Inc. The exposure of this information may lead to the disclosure of sensitive personal or corporate data belonging to the company's employees and its various commercial partners. Because the organization is based in the United States, this incident may trigger specific legal obligations, such as state-level data protection laws that require companies to notify affected individuals and regulatory bodies following a breach.

It is important to note that Dragonforce is known to employ a model where they provide infrastructure to various affiliates. This means that while the group is responsible for the leak site, the actual intrusion may have been carried out by a different actor using the group's platform. This complexity in the ransomware ecosystem makes attribution and incident response more challenging for affected organizations.

For companies operating in the construction and manufacturing sectors, such incidents highlight the importance of robust cybersecurity frameworks. Protecting sensitive project details and administrative records is vital to preventing reputational damage and ensuring the continuity of operational processes. Organizations in this sector often focus on securing their supply chain and implementing strict access controls to mitigate the risk of unauthorized data exfiltration. The public release of data can cause significant disruption, making proactive defense and a well-defined incident response plan essential for modern industrial enterprises.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories