Dragonforce has claimed a ransomware intrusion against Oriska Insurance, a US-based insurer that serves small and minority-owned businesses with multi-policy solutions, including surety bonding, workers’ compensation, health, and disability coverage. The attackers threaten to exfiltrate and publish sensitive client data and disrupt claims processing unless a ransom is paid, potentially undermining Oriska’s commitment to reliability and timely claim payments. #UnitedStates
Incident Details
- Victim: Oriska Insurance
- Sector: Financial Services
- Country: US
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=3ecf1364-50e5-4ebb-86d0-5fcf71e54979
- Discovered: 2026-03-20 11:09:05.427459
- Published: 2026-03-20 10:29:59.899103
Information
- Specializes in surety bonding, workers’ compensation, health insurance, and disability insurance tailored for small and minority-owned businesses.
- Positions itself as a single-source solution for multi-policy requirements, ensuring competitive pricing and comprehensive protection.
- Committed to reliability with a track record of never failing to pay a claim or abandoning an employer.
- Designs services to help clients meet job requirements while staying within budget and legal constraints.
- Offers tailored plans to support compliance and cost management for small and minority-owned businesses.
Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.