[DRAGONFORCE] – Ransomware Victim: Marmotech
![[DRAGONFORCE] - Ransomware Victim: Marmotech 1 image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png)
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the DRAGONFORCE Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
On October 18, 2025, Marmotech, a quarry and stone-processing company based in the Dominican Republic, appears on the dragonforce leak site as a ransomware victim. The post identifies Marmotech as a victim of a ransomware operation attributed to the threat actor group dragonforce and provides a description of Marmotech’s business operations. The company owns and manages eight quarries producing marble, travertine, limestone, and coralline stone; these products are processed with state-of-the-art European technology and CAD/CAM machinery to ensure precision in design and cutting. Marmotech emphasizes a commitment to sustainable mining with environmental protection policies and notes that it exports products to the Americas, Europe, and the Middle East, listing markets such as the United Kingdom, Italy, Spain, Israel, Brazil, Argentina, Venezuela, Canada, and the United States, as well as the broader Caribbean region.
The post’s metadata does not show a clearly stated attack impact such as “Encrypted” or “Data leak” in the supplied fields; the record notes only that a claim URL is present on the page. The page contains no visible screenshots or images and does not indicate any downloadable files or links within the provided data. There is no ransom amount listed in the dataset. The key date provided, October 18, 2025, is treated as the post date; a separate compromise date is not indicated in the data. Overall, the leak entry confirms Marmotech as a victim of ransomware activity associated with the dragonforce group, underscoring the continued exposure risk to extractive and construction materials sectors.
Support Our Work
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.
