DragonForce Ransomware Activity in the UAE
DragonForce has claimed 5 organisations in the United Arab Emirates, which is 4.5% of all attributed UAE claims. Its activity concentrates in Professional Services, accounting for 1 of those claims. The first DragonForce claim against a UAE organisation was recorded on , the most recent on .
Data as of , drawn from 192 leak-site claims collected by ransomware.live. This page counts DragonForce claims only. How this data is collected and filtered.
Which UAE sectors DragonForce targets
| Name | Relative volume | Incidents | Share |
|---|---|---|---|
| Professional Services | 1 | 20% | |
| Technology | 1 | 20% | |
| Financial Services | 1 | 20% | |
| Manufacturing | 1 | 20% | |
| Hospitality | 1 | 20% | |
| Total | 5 | 100% |
When DragonForce claimed UAE organisations
DragonForce claimed 4 of its 5 UAE organisations during 2026, making it one of the two most active groups of the current period.
DragonForce has claimed 5 UAE organisations
DragonForce ranks fifth of 47 groups on this tracker and appears across 5 distinct sectors, one claim in each. The distribution is as flat as any group here shows. Its activity sits almost entirely inside the period that is still open.
Four of the five DragonForce claims fall in 2026
Leak-site monitoring recorded the first DragonForce claim against a UAE organisation on 21 November 2025. The most recent was recorded on 12 June 2026. The group claimed 1 organisation in 2025 and 4 in 2026.
DragonForce is one of the two leading groups of the partial year 2026. It had no UAE record before late 2025. Its activity is concentrated in the period that is still open, so this count may move before the year closes.
Spread across 5 sectors with one claim each means DragonForce shows no sector preference in UAE data. That pattern matches the sector pages, where it appears once in each of those breakdowns.
What this means for UAE organisations
- Treat DragonForce as current rather than historical, because its most recent UAE claim falls in June 2026.
- Avoid narrowing your defence by sector here, since the group has claimed one organisation in each of 5 different sectors.
- Compare this profile against LockBit 3.0, which leads the all-time table with 10 claims yet stopped in February 2024.
- Record your breach notification path under the UAE Personal Data Protection Law before you need it.
- Test external access paths on a fixed schedule, since a group can accumulate 4 claims inside a single partial year.
- Retain test results as evidence, because assessors ask for demonstration rather than description.
- Revisit this page as 2026 completes, given that most of this group’s record sits inside an unfinished year.