DragonForce Claims ERH as a Ransomware Victim

Summary
Ransomware.live attributes a claim concerning ERH’s UK traffic management operations to DragonForce. The group allegedly caused service disruption and compromised data; the article says these claims are unconfirmed.
Key points
- The monitoring record identifies ERH (erh[.]co[.]uk) as the named victim and DragonForce as the alleged actor.
- The claim is attributed to a DragonForce blog source and is also identified as monitored by ransomware[.]live.
- The article alleges service disruption and data compromise affecting ERH’s traffic management operations; it provides no independent confirmation.
- The record gives discovery and publication dates of May 27, 2026.
Article Details
- Victim
- ERH
- Victim Domain
- erh.co.uk
- Claim Date
- 2026-05-27
- Encryption Status
- Unknown; the article does not state whether systems were encrypted.
- Exfiltration Status
- Unknown; the article reports data compromise based on the group’s claim but does not establish exfiltration.
- Exfiltrated Data
- Data compromise is reported, but the data involved is not specified; the claim is unverified.
- Ransom Demand
- Unknown; no demand is reported.
- Leak Status
- A ransomware-group blog claim is cited, but the article does not state that data was leaked or published; the claim is unverified.
