The ransomware claim alleges that the threat actor DragonForce has compromised Express Logistics and Distribution Ltd, a leading logistics company in Bulgaria, and plans to release large volumes of private data unless contacted. The impacted country is #Bulgaria.
Incident Details
- Victim: Express Logistics and Distribution Ltd
- Country: GB
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=16ee1a86-1b1f-441a-8d5c-9a67e84bb5d4
- Discovered: 2025-10-11 01:56:23.637046
- Published: 2025-10-11 01:44:59.550447
Information
- Express Logistics and Distribution Ltd is a leading distribution and logistics company in Bulgaria, with extensive market coverage.
- The company employs approximately 900 staff and operates a fleet of 380 vehicles.
- It ranks among the top 10 largest companies in Bulgaria.
- ELD is recognized as the 5th most dynamic company in Southeast Europe according to “SEE TOP 100” research.
- The company develops long-term partnerships based on honesty, reliability, and security.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.