The ransomware claim alleges that the threat actor Dragonforce targeted Grupo DIRIA, a luxury hospitality provider in Costa Rica, potentially compromising sensitive data and disrupting their operations. This incident highlights the increasing cybersecurity risks faced by the tourism and hospitality industry in Costa Rica. #CostaRica
Incident Details
- Victim: Grupo DIRIA
- Country: CR
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=38ad9d7a-d7d8-4117-896b-040344ec7191
- Discovered: 2025-08-27 14:46:10.097961
- Published: 2025-08-27 14:34:42.421636
Information
- Grupo DIRIA provides luxury accommodations in Tamarindo Beach, Costa Rica.
- The company offers a variety of hotels and resorts aimed at delivering high-quality lodging.
- They are dedicated to respecting cultural traditions while providing modern comfort and security.
- Their mission is centered on tourism and hospitality, offering an authentic Costa Rican experience.
- Intended clients are travelers seeking immersive cultural experiences and upscale lodging options.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.