Steel Dynamics UK listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: March 9, 2025

Steel Dynamics UK targeted by dragonforce ransomware group

The United Kingdom-based steel manufacturer Steel Dynamics UK has been listed on the leak site associated with the ransomware group known as dragonforce. The group has published an announcement claiming to have conducted a cyber operation against the organization's systems. This listing suggests that the organization's data may have been compromised and could potentially be released by the threat actors.

The claims made by dragonforce

According to the announcement published on the dragonforce leak site on March 9, 2025, the group asserts that they have successfully carried out an operation against the systems of Steel Dynamics UK. The claim of an attack was reportedly made around March 5, 2025. In the context of modern ransomware operations, such listings are often used as a form of pressure in double extortion schemes. In these scenarios, threat actors not only encrypt an organization's data but also threaten to leak sensitive information on public platforms to coerce the victim into paying a ransom.

The publication of a company on a leak site serves as a public notification of a potential breach. While the listing is a claim made by the ransomware group, it indicates a significant risk to the target organization. The presence of a verification screen on the leak site is often used by these groups to validate their claims to interested parties or to demonstrate that they have indeed gained access to the target's environment.

Information regarding the compromised data

At this stage, there is no information regarding the specific nature or volume of the data that has allegedly been compromised. The listing does not provide details concerning the amount of data stolen or the specific file count involved in the incident. Furthermore, no ransom demand has been specified in the available information. The current documentation provided by the group only includes a verification screen used to access their leak site, which does not reveal the contents of the alleged theft.

About Steel Dynamics UK

Steel Dynamics UK is a leading steel stockholder and processor based in the United Kingdom. The company plays a vital role in the industrial supply chain by supplying stainless steel products and bespoke material packages to a wide variety of critical industries. Their client base includes sectors such as nuclear, architectural, oil and gas, and petrochemical industries, making them a significant player in the manufacturing and material supply landscape.

Risk assessment and industry implications

This incident may pose significant operational and reputational risks for Steel Dynamics UK. Because the organization provides essential services and materials to critical sectors—including nuclear, energy, and petrochemicals—the breach could potentially create indirect effects throughout the broader supply chain. When a manufacturer serving these industries is compromised, the ripple effects can impact the stability and security of the downstream sectors they support.

Furthermore, as an organization operating within the United Kingdom, Steel Dynamics UK may be subject to strict data protection obligations under the UK GDPR. In the event of a confirmed data breach, the company could face legal proceedings and regulatory scrutiny. It is also important to note that the dragonforce group reportedly follows a model of providing infrastructure to various affiliates. This means it is possible that the actual attack was carried out by different actors using the group's platform.

Given these complexities, the organization's customers and business partners should remain highly vigilant. Such incidents often lead to secondary risks, most notably targeted phishing attacks where threat actors use stolen information to impersonate company representatives. Organizations in the manufacturing and critical infrastructure sectors should focus on robust incident response plans and continuous monitoring to mitigate the impact of such supply chain risks.