Software Design Consulting Group listed by Dragonforce ransomware group

• Ransomware group: Dragonforce
• Country: United States
• Sector: Technology
• Announcement date: July 28, 2025

Dragonforce claims data breach against Software Design Consulting Group

The ransomware group known as Dragonforce has listed Software Design Consulting Group on its leak site, claiming to have exfiltrated a significant amount of data belonging to the organization. This announcement, made on July 28, 2025, marks a new instance of data extortion targeting the technology sector.

The threat actor known as Dragonforce listed Software Design Consulting Group on its leak site on July 28, 2025. The group claims to have published a data set totaling 26.4 GB allegedly belonging to the organization. The announcement includes details regarding the company's operations in Lebanon, though no specific information regarding the nature of the attack was provided. While the group has claimed the attack occurred on the same day the announcement was made, the specific technical details of how the breach was executed remain unknown.

Details of the claimed data exfiltration

Regarding the specifics of the stolen information, the threat actor has provided limited details. The group has stated that the volume of the leaked data is 26.4 GB. However, there is no specific detail regarding the content of the leaked data; it is only stated to be 26.4 GB in size. The listing does not specify the number of files involved or the exact nature of the files contained within the claimed data set.

Summary of claimed data

• Total claimed data size: 26.4 GB

The listing names no specific data types or individual file categories.

About Software Design Consulting Group

Software Design Consulting Group is a software consultancy firm that develops ERP systems, mobile solutions, and management tools for various industries such as retail, media, and construction. Operating in Dubai, Beirut, and Riyadh, the company provides tailored software solutions and project management services with over 40 years of experience in ERP.

Potential impact and industry implications

This leak may trigger supply chain risks through the ERP and management software the company provides to its clients. Because the organization provides critical management tools to various industries, the security of its data is closely linked to the security of its client base. The publication of this data could lead to secondary phishing attacks targeting the company's clients in the retail, media, and construction sectors.

Furthermore, as the company operates in Lebanon, legal proceedings under relevant local data protection regulations may be initiated. The sensitivity of the situation is heightened by the company's 40 years of ERP experience, which may increase the sensitivity of the leaked data and its potential impact on corporate reputation. Additionally, given that the Dragonforce group provides infrastructure to affiliates, the misuse of the leaked data by various actors may be observed.

In general, ransomware groups often employ double extortion tactics, where they not only encrypt an organization's systems but also steal sensitive data to threaten its public release. This pressure is used to coerce victims into paying ransoms. For organizations in the technology and software consultancy sectors, maintaining robust data protection measures is essential to prevent such leaks. Common defensive steps for organizations include implementing strict access controls, maintaining regular offline backups, and conducting thorough security audits of software development life cycles to mitigate the risk of supply chain compromises.