Ransom! Downes

The ransomware claim involves the threat actor dragonforce targeting Downes, a prominent FMCG brand management company in Australia, which services major retailers like Woolworths and Coles. The attack potentially jeopardizes Downes’ extensive retail network across Australia. #Australia

Incident Details

  • Victim: Downes
  • Country:
  • Actor: dragonforce
  • Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=7b8043b5-c540-4f65-b5c2-4ae47ce34962
  • Discovered: 2025-10-10 20:44:29.650476
  • Published: 2025-10-10 20:21:10.006868

Information

  • Ransomware attack affected Downes, a company managed by the actor Dragonforce.
  • Downes has been proudly managing FMCG brands for over 35 years.
  • The company covers over 94% of major grocery retailers, including Woolworths, Coles, Independent Supermarkets (IGA & Foodworks), Bunnings, Big W, and Priceline.
  • Downes manages products from development through submission to shelving on shelves.
  • Extensive experience in FMCG sales, merchandising, and planogram implementation across all retailers.
  • Utilizes a direct to store model to buy/sell products into each state and territory, expanding reach beyond supply via Metcash DC.
  • Employs a team of full-time sales reps to service independent retail channels on a regular call cycle.
  • Values honesty, integrity, and transparency, emphasizing a passionate and loyal business ethos that delivers on promises.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live