The ransomware claim against Hartmann Bau GmbH in Germany alleges that the threat actor dragonforce encrypted critical project data and demanded a ransom. The incident purportedly disrupted planning, construction, and handover workflows across Hartmann Bau’s service areas in Paderborn, Höxter, and Kassel, potentially impacting residential, commercial, agricultural, and civil engineering projects #Germany
Incident Details
- Victim: HARTMANN BAU
- Sector: Construction
- Country: DE
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=28239bd8-a606-45ef-86c0-1e2399ac547d
- Discovered: 2026-03-18 19:05:39.555938
- Published: 2026-03-18 17:56:20.512541
Information
- Hartmann Bau GmbH is a construction company based in Borgentreich near Kassel, serving the Paderborn, Höxter, and Kassel areas
- Specializes in residential, commercial, agricultural, and civil engineering projects
- Over 80 years of experience
- Emphasizes quality, timely completion, and customer satisfaction
- Offers comprehensive services from planning through key handover
- Ensures adherence to high standards and legal requirements
- Team equipped to handle diverse projects tailored to clients’ needs, including offices, housing, barns, and warehouses

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.