Ransomware victim disclosure
← All victimsFAT Brands
Claimed by Dragonforce · listed 13 days ago
Status timeline
- Listed
May 7, 2026
Current state: Listed for ransom
At a glance
- Group
- Dragonforce
- Status
- Listed for ransom
- Country
- United States
- Sector
- Food/Franchising
- Listed on leak site
- May 7, 2026
- Data size
- 944037400576
- Ransom demanded
- $4
About the victim
AI dossier — public-source company profileFAT Brands Inc. is a Los Angeles-based multi-brand restaurant franchising company that acquires, markets, and develops fast casual and casual dining restaurant concepts. The company owns and franchises numerous well-known brands including Fatburger, Round Table Pizza, Johnny Rockets, Twin Peaks, and others. FAT Brands operates thousands of locations across the United States and internationally.
- Industry
- Restaurant Franchising & Food Service
- Address
- 11601 Wilshire Blvd, Suite 1100, Los Angeles, CA 90025, United States
- Employees
- 1001-5000
- Founded
- 1947
Attack summary
Severity: high — Approximately 944 GB of data is claimed as exfiltrated from a major multi-brand restaurant franchisor, likely containing employee PII, franchisee financial data, and business-sensitive records at significant scale; no confirmed regulated medical or government data identified.Dragonforce claims to have exfiltrated approximately 944 GB of data from FAT Brands; the post lists the victim with a disclosed status of 'listed,' indicating the data or proof has been published or is pending publication on their leak site.
Data the group says was taken
AI dossier — extracted from the leak post- Corporate financial records
- Franchisee data
- Employee PII
- Customer data
- Operational documents
- Contracts and agreements
What the group claims
FAT Brands is a leading global franchising company that strategically acquires, promotes, and develops quick-service, fast-casual, and casual dining concepts around the world.
The leak post
captured from the group's site```
{"data":{"count":481,"publications":[{"uuid":"282416b0-8ad9-4980-a147-7bc506476190","created_at":"2026-05-04T10:59:12.451753Z","name":"Cult Wines","website":"cultwines.com","address":"www.cultwines.com","description":"Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.","weight":308509929472,"is_timer_publication_stopped":false,"timer_publication":"2026-05-09T07:48:00Z","try_again":false,"tags":[],"logo_uuid":"4a447086-5796-40e1-9a66-a4a2900e7d62","is_transfering":false},{"uuid":"46716f4a-c0e6-42b4-abba-bb9025de4ef7","created_at":"2026-04-27T16:20:14.224783Z","na…Sources
Source
Indexed 13 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
