Ransomware victim disclosure
← All victimsRosehill Gardens
Claimed by Dragonforce · listed 13 days ago
Status timeline
- Listed
May 7, 2026
Current state: Listed for ransom
At a glance
- Group
- Dragonforce
- Status
- Listed for ransom
- Country
- United States
- Sector
- Landscaping/Agriculture
- Listed on leak site
- May 7, 2026
- Data size
- 333096157184
- Ransom demanded
- $4
About the victim
AI dossier — public-source company profileRosehill Gardens is a full-service landscaping company based in Kansas City, Missouri, with over 150 professionals specializing in landscape design, maintenance, irrigation, lighting, and wholesale sales of plants and trees. The company has operated for over 100 years and serves both residential and commercial clients. In addition to landscaping, it operates a winery and event space and manages over 1,000 acres of farmland at Rosehill Farms.
- Industry
- Landscaping & Horticulture Services
- Address
- 311 E 135th St, Kansas City, MO 64145
- Employees
- 150+
Attack summary
Severity: high — Approximately 333 GB of data is claimed exfiltrated from a company with 150+ employees and both residential and commercial client relationships, suggesting significant business and potentially personal/client data exposure at scale.Dragonforce claims to have exfiltrated approximately 333 GB of data from Rosehill Gardens and has listed the company on its leak site. The post indicates a ransom demand of $4 with a disclosure timer, suggesting data publication is threatened if payment is not made.
Data the group says was taken
AI dossier — extracted from the leak post- Business operational data
- Client records (residential and commercial)
- Employee information
- Financial records
- Wholesale and farm management data
What the group claims
Rosehill Gardens is a professional landscaping company based in Kansas City, employing over 150 specialists in landscape design, maintenance, irrigation, lighting, and the wholesale of gardening supplies. They serve both residential and commercial clients, offering services such as snow removal, garden center supplies, and event space at their winery.
The leak post
captured from the group's site```
{"data":{"count":481,"publications":[{"uuid":"282416b0-8ad9-4980-a147-7bc506476190","created_at":"2026-05-04T10:59:12.451753Z","name":"Cult Wines","website":"cultwines.com","address":"www.cultwines.com","description":"Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.","weight":308509929472,"is_timer_publication_stopped":false,"timer_publication":"2026-05-09T07:48:00Z","try_again":false,"tags":[],"logo_uuid":"4a447086-5796-40e1-9a66-a4a2900e7d62","is_transfering":false},{"uuid":"46716f4a-c0e6-42b4-abba-bb9025de4ef7","created_at":"2026-04-27T16:20:14.224783Z","na…Sources
Source
Indexed 13 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
