Ransom! Antigo Construction

The threat actor Dragonforce has claimed to have successfully attacked Antigo Construction in the US, encrypting critical data and demanding ransom via email. The company, a leader in concrete pavement rehabilitation, is now facing potential operational disruptions due to this ransomware incident. #United States

Incident Details

  • Victim: Antigo Construction
  • Country: US
  • Actor: dragonforce
  • Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=5e45838d-5efe-4e1d-a355-ded1452cdcba
  • Discovered: 2025-06-26 18:24:36.931928
  • Published: 2025-06-26 18:16:31.903668

Information

  • Antigo Construction is located in Antigo, Wisconsin, serving as the headquarters for North American and international operations.
  • The company entered the pavement rehabilitation business in 1982, importing Germany’s first guillotine-style concrete pavement breakers.
  • In 1988, Antigo began operating the 8600 Badger Breaker®.
  • In 1995, they introduced the MHB Badger Breaker® to meet increasing demand for more efficient concrete breaking technology.
  • Today, Antigo is a global leader in concrete pavement rehabilitation, handling 45 million square yards of concrete rubblization, 82 million square yards of crack/break and seat, and 106 million square yards of break for removal.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live