Ransom! Belk

Dragonforce ransomware targeted Belk, a department store in Monroe, North Carolina, claiming that their intent was not to destroy the business but that their refusal to pay led to customer data being compromised. The incident impacted the US.

Incident Details

  • Victim: Belk
  • Country: US
  • Actor: dragonforce
  • Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=7aac09ef-2133-4d9b-80be-7ea1194b42d7
  • Discovered: 2025-07-14 12:45:06.645529
  • Published: 2025-07-14 11:56:26.966495

Information

  • Belk is a department store offering apparel, shoes, accessories, cosmetics, home furnishings, and wedding registry services both online and in-store.
  • The ransomware attack was carried out by the actor Dragonforce.
  • Belk is headquartered in Monroe, North Carolina.
  • The company’s public statement indicated that their intention was not to destroy the business.
  • They provided the opportunity for the victim to address negligence and preserve customer data.
  • The victim refused to comply with the payment agreement at the negotiation stage.
  • The refusal to pay resulted in consequences that affected people, including customers.
  • The incident is presented as a lesson for others to learn from.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live