VoiceTeam Call listed on dragonforce leak site

• Ransomware group: dragonforce
• Country: Dominican Republic
• Sector: Technology
• Announcement date: December 8, 2025

Dragonforce claims data breach at VoiceTeam Call

The ransomware group known as dragonforce has listed the technology sector organization VoiceTeam Call on its dedicated leak site. According to the announcement made on December 8, 2025, the threat actor claims to have successfully exfiltrated a significant volume of data belonging to the company. This development follows a pattern often seen in modern cyberattacks where groups use public leak portals to exert pressure on their targets.

In many ransomware scenarios, attackers employ a tactic known as double extortion. This method involves not only encrypting an organization's internal systems to disrupt operations but also stealing sensitive information before the encryption occurs. By threatening to release this stolen data on a public platform, the attackers aim to coerce the victim into paying a ransom to prevent the exposure of confidential information. This approach increases the pressure on the target, as the consequences of a leak often extend far beyond immediate operational downtime.

Details of the claimed attack

The threat actor dragonforce claims to have gained unauthorized access to the organization's data. The announcement, which was posted on the group's leak site on December 8, 2025, specifies that the group has acquired a dataset totaling approximately 217.93 GB. The group's primary objective in publishing this claim appears to be the exertion of pressure on VoiceTeam Call through the threat of data exposure.

While the group has claimed a specific volume of data, the provided information does not include a specific file list detailing the exact contents of the compromised files. However, given the nature of the organization's business operations, it is possible that sensitive customer communication records and business process data may be included in the alleged breach. The lack of a detailed file manifest makes it difficult to determine the exact scope of the information at risk.

About VoiceTeam Call

VoiceTeam Call is an outsourcing service provider that specializes in various operational support functions. The company focuses on providing sales, customer service, and back-office support services. Headquartered in the Dominican Republic, VoiceTeam Call provides operational support to various industries, primarily utilizing a staff with extensive knowledge of American culture to serve its clients.

Risk assessment and industry implications

The actions taken by the dragonforce group pose a significant risk regarding the exposure of sensitive data related to the organization's sales and customer service processes. Because VoiceTeam Call is headquartered in the Dominican Republic and maintains operations in the US, a potential data breach could impact the organization's compliance with both local regulations and US-based data protection standards. The exposure of customer-related information can create a foundation for secondary threats, such as identity theft and targeted phishing attacks against the company's clients.

The group's operational model, which involves providing infrastructure to various affiliates, suggests that such attacks may become increasingly diversified. This model can lead to an increase in the risk of secondary extortion, where different actors may attempt to exploit the same breach for different purposes. For organizations operating in the outsourcing and customer service sectors, maintaining robust data protection measures is critical to mitigating these risks.

To defend against such threats, organizations in this sector typically focus on strengthening their security posture through several defensive steps. This includes implementing strict access controls to limit data exposure, maintaining comprehensive logging to detect unauthorized access, and ensuring regular backups of critical systems. Furthermore, because these organizations often handle third-party data, adhering to international data protection standards is a vital component of their operational security and regulatory compliance strategy.