DragonForce Claims Ransomware Incident at CF Evans Construction

Summary
DragonForce claims it accessed CF Evans Construction records, including financial, HR, and accounting documents, passwords, and databases. The monitoring article says the claim is unconfirmed.
Key points
- The record names CF Evans Construction in the United States as the claimed victim and DragonForce as the actor.
- The article attributes the claim to DragonForce and says it was monitored by ransomware.live; the claim is unconfirmed.
- The group reportedly claimed access to corporate correspondence, financial, HR, and accounting documents, certificates, contracts, passwords, and databases.
- The record lists May 8, 2026, as the discovery and publication date.
Article Details
- Victim
- CF Evans Construction
- Claim Date
- 2026-05-08
- Encryption Status
- Not disclosed
- Exfiltration Status
- Unverified; the post claims possible access to records but does not establish exfiltration.
- Exfiltrated Data
- The post claims dragonforce may have accessed corporate correspondence, financial, HR, and accounting documents, certificates, contracts, passwords, and databases; these claims are unverified.
- Ransom Demand
- Not disclosed
- Leak Status
- dragonforce publicly claimed the incident; victim confirmation and the authenticity of any data are unverified.
