The ransomware claim involves One Community FCU in the US, where threat actor dragonforce allegedly released databases and internal documentation, including client data such as financial information, statements, and documents related to delinquent payments. The incident also references TraceSecurity, LLC’s security work for the institution and its alleged shortcomings contributing to the breach. #UnitedStates
Incident Details
- Victim: One Community FCU
- Sector: Financial Services
- Country: US
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=1e29a8a9-2239-4923-82af-cf467e5c22e0
- Discovered: 2026-07-21T16:00:47.614752+00:00
- Published: 2026-07-21T15:23:13.062785+00:00
Information
- One Community FCU offers a range of financial services, including loans, savings accounts, and online banking solutions.
- Their products include personal, auto, mortgage, and credit card loans, along with savings and checking accounts.
- The released materials include databases, internal documentation, client data, client documents, client financial information, and delinquent payment records.
- The publication also includes reports and documentation produced by TraceSecurity, LLC, which handled security matters for the organization.
- The security work performed by TraceSecurity, LLC is described as poor and is said to have contributed to the data breach.
Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.