The ransomware claim targets First Trinity Financial (FTFC), an Oklahoma-based insurance holding company in Tulsa, with the threat actor ‘dragonforce’ associated with the incident. The attackers allegedly demanded payment and threatened to release sensitive financial data, in a campaign linked to dragonforce in the United States #UnitedStates
Incident Details
- Victim: First Trinity Financial
- Sector: Financial Services
- Country: US
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=cdea9b63-8f0a-4cf0-9d93-51f5fa6142aa
- Discovered: 2026-04-01 13:51:40.015913
- Published: 2026-04-01 12:29:40.522990
Information
- FTFC is an insurance holding company based in Tulsa, Oklahoma.
- Operates two life insurance companies: Trinity Life Insurance Company (TLIC) in Tulsa, Oklahoma, and Family Benefit Life Insurance Company (FBLIC) in Jefferson City, Missouri.
- Raised $26,475,000 through private placement and public stock offerings.
- Currently owned by over 4,000 Oklahoma residents.
- Dedicated to stemming the outflow of capital from Oklahoma by providing a broadly held financial services corporation offering innovative, attractive, and competitive financial products and services.
Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.