Trackside Services listed on Dragonforce leak site

• Ransomware group: Dragonforce
• Country: United States
• Sector: Transportation
• Announcement date: June 17, 2025

Dragonforce claims data exfiltration from Trackside Services

The ransomware group known as Dragonforce has listed the United States-based organization Trackside Services on its leak site. According to the group's announcement, they claim to have exfiltrated a significant volume of data from the company's systems.

The incident was announced on June 17, 2025, which matches the date the group claims the attack took place. This type of activity is characteristic of modern ransomware operations, where threat actors often employ a double extortion tactic. In such scenarios, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information to use as leverage. If the victim refuses to pay the ransom, the attackers threaten to publish the stolen data on public leak sites to cause reputational, legal, or operational damage.

Details of the alleged breach

The Dragonforce group claims to have published a data set totaling 87.66 GB. While the group has provided the total size of the alleged theft, they have not provided specific details regarding the exact content of the leaked files. However, it is assessed that the 87.66 GB of files may contain corporate operational data. The listing also includes general information regarding the organization's operations and location details.

The listing does not name any specific data types or individual files that have been compromised. Consequently, the exact nature of the information remains unconfirmed beyond the group's claim of a large-scale exfiltration.

About Trackside Services

Trackside Services is an American company that manufactures hydraulic and pneumatic braking systems for industries such as railroad freight yards, ports, and mining. Since 1996, it has been developing energy management technologies that provide railcar stabilization and speed control.

Analysis and potential implications

Dragonforce is a ransomware group that emerged in 2023 and is reported to operate by providing infrastructure to affiliates. This incident may lead to the exposure of trade secrets, customer information, or operational data belonging to Trackside Services. Given the group's past methods, it is assessed that the data is being published due to the failure to meet ransom demands.

Because the organization is based in the United States, the potential data breach may result in legal consequences under state-level data protection laws and sectoral regulations. Furthermore, secondary risks may arise for the organization's customers and business partners, such as identity theft or targeted phishing attacks. In the transportation and industrial manufacturing sectors, such breaches can disrupt supply chains and compromise sensitive technical specifications.

To defend against such threats, organizations typically implement a multi-layered security approach. This includes maintaining robust backup solutions that are isolated from the primary network, implementing strict access controls to limit data exposure, and conducting regular employee training to recognize phishing attempts. Continuous monitoring of network traffic can also help detect unauthorized data exfiltration before large volumes of information can be moved out of the environment.