DragonForce Claims Norwood Law Firm as a Ransomware Victim

Summary
A ransomware.live monitoring post attributes a ransomware victim claim involving Tulsa-based Norwood Law Firm to DragonForce. The post cites a group blog and says the claim could not be confirmed.
Key points
- The monitored claim identifies Norwood Law Firm, a Tulsa-based legal firm, as the alleged victim.
- The post attributes the claim to DragonForce and lists a group blog as its source: hxxp://xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd[.]onion/blog/?post_uuid=66da3509-a3fc-4ff3-a229-ecfa57caf4e0.
- The record lists September 6, 2026, as the discovery date and September 4, 2026, as the publication date.
- The post says it cannot confirm the ransomware group’s claims; no affected data or operational impact is specified.
Article Details
- Victim
- Norwood Law Firm
- Victim Domain
- Not disclosed
- Claim Date
- 2026-09-04
- Encryption Status
- Unknown; the source does not report whether files were encrypted.
- Exfiltration Status
- Unknown; the source does not report whether data was exfiltrated.
- Ransom Demand
- Unknown; no demand is reported.
- Leak Status
- A ransomware-group claim is reported, but publication of data and the authenticity of any data are not established.
