DragonForce Claims Criba Data Leak Across Argentina and Uruguay

Summary
DragonForce reportedly claimed Criba’s data included financial and client documents and information from Argentina, Uruguay, and other countries. The claim is unconfirmed.
Key points
- The record names Criba, an organization in Argentina, as the claimed victim and DragonForce as the actor.
- The claim reportedly concerns financial and client documents, along with data related to Argentina, Uruguay, and other countries.
- The post was published and discovered on August 24, 2026.
- The source says the claim is based on the ransomware group’s public statements and that its accuracy has not been confirmed.
Article Details
- Victim
- Criba
- Claim Date
- 2026-08-24
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed; unverified
- Exfiltrated Data
- The report says the group's post claimed a release including financial documents, client documentation, and other information related to Argentina, Uruguay, and other countries. The claim is unverified.
- Leak Status
- The group's leak-site post reportedly lists a data release; the information is unverified.
Threat Actors
Countries
ArgentinaCriba (AR) in Argentina reported a ransomware claim by threat actor dragonforce, with leaked data reportedly covering Argentina, Uruguay, and other countries, including financial and client documentation and a largeUruguayreported a ransomware claim by threat actor dragonforce, with leaked data reportedly covering Argentina, Uruguay, and other countries, including financial and client documentation and a large volume of information not
