Ransomware victim disclosure
← All victimsmassdevelopment.com
Claimed by Dragonforce · listed 8 days ago
Status timeline
- Listed
May 13, 2026
Current state: Listed for ransom
At a glance
- Group
- Dragonforce
- Status
- Listed for ransom
- Country
- United States
- Sector
- Government/Finance
- Listed on leak site
- May 13, 2026
- Data size
- 1710200643584
- Ransom demanded
- $4
About the victim
AI dossier — public-source company profileMassDevelopment is a Massachusetts state agency focused on finance and economic development. It partners with businesses, nonprofit organizations, financial institutions, and local communities to stimulate economic growth across Massachusetts through bonds, loans, guarantees, tax credits, and real estate services. In fiscal year 2017 alone, it financed or managed 377 projects attracting over $4 billion in investment and supporting approximately 9,488 jobs.
- Industry
- Government Finance & Economic Development
- Address
- 99 High Street, 11th Floor, Boston, MA 02110, United States
Attack summary
Severity: critical — MassDevelopment is a state government finance agency handling regulated financial instruments, public funds, tax credits, and data from businesses, nonprofits, municipalities, and housing projects across Massachusetts. A 1.71 TB exfiltration from such an entity almost certainly encompasses PII at scale, sensitive financial records, and government-linked data, meeting the threshold for critical severity.Dragonforce claims to have exfiltrated approximately 1.71 TB of data from MassDevelopment, listing the organization on its leak site. The post does not explicitly describe encryption but advertises a large volume of stolen data with a ransom demand of $4.
Data the group says was taken
AI dossier — extracted from the leak post- Financial documents
- Bond and loan records
- Corporate correspondence
- Project and development data
- Community and municipal records
- Tax credit and grant program data
What the group claims
MassDevelopment, a state agency for finance and development, partners with businesses, nonprofit organizations, financial institutions, and local communities to stimulate economic growth throughout the state.
The leak post
captured from the group's site```
{"data":{"count":483,"publications":[{"uuid":"b008b8b7-0e47-416f-adcd-2313d8136de4","created_at":"2026-05-08T20:56:13.122134Z","name":"CF Evans Construction","website":"www.cfevans.com","address":"125 Regional Pkwy Ste 200, Orangeburg, South Carolina, 29118, United States","description":"A recognized leader in the multi-family housing construction industry, CF Evans Construction provides a product for developers. The company has thrived amid six decades.\nThe data of this company includes:\n Corporate correspondence of senior executives\n Financial documents\n HR documents\n Accounting documents\n Certificates, contracts, passwords, databases, and much more.","weight":4775795351552,"is_timer_publication_stopped":false,"timer_publication":"2026-05-22T07:48:00Z","try_again":false,"tags":[],"logo_uuid":"f4e582dd-6562-4590-bac8-2b9e5c564853","is_transfering":false},{"uuid":"3827192f-9bb3-490c-9c1c-d28b382510cd","created_at":"2026-05-08T17:53:24.736605Z","name":"CMC Expertise Comptable","website":"cmcexpertise.fr","address":"32 Rue De La Clairière, Fort-de-France,","description":"CMC Expertise Comptable is a certified accounting firm located in Martinique, dedicated t…Sources
Source
Indexed 8 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
