Bigso Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 15, 2026, the ransomware group dragonforce listed Bigso on its site and claimed responsibility for a ransomware attack that included the exfiltration of internal files. The number of individuals affected is not known, and no additional details on the timing, method, or scale of the incident have been released.

What happened

The only confirmed information is the listing itself and the statement that internal files were taken during a ransomware attack. No confirmation from Bigso has been reported, and the organization has not disclosed whether any systems were encrypted or whether data was published elsewhere. The date the files were accessed, the volume of material involved, and the method of initial access remain undisclosed.

Inside dragonforce

Dragonforce is a ransomware group that maintains a leak site where it lists organizations it claims to have targeted. Like other groups in this category, it typically pairs file encryption on victim systems with the threat of releasing stolen data if a ransom demand is not met. Public records show the group has appeared in multiple incidents involving commercial organizations, though each listing on its site constitutes an unverified claim until corroborated by the victim or independent investigation.

About Bigso

Bigso Box was established in 1963 and produces premium storage and packaging products made from sustainable materials. Its offerings include customizable boxes and luxury packaging for homes, offices, and retail use. Organizations in this sector routinely maintain records related to customers, suppliers, product designs, manufacturing processes, and internal operations.

What was likely exposed

The listing states that internal files were exfiltrated. The precise categories of data contained in those files have not been published, so the exact contents remain unconfirmed. Organizations of this type commonly store the following categories of information:

• Customer order and account details
• Supplier contracts and pricing information
• Product design files and manufacturing specifications
• Employee records and internal communications

Until Bigso or an official investigation releases a data inventory, any list of exposed data types stays speculative.

Why it matters

Internal files can contain operational information that affects business relationships and competitive position. When such material is removed without authorization, affected organizations may face follow-on risks including misuse of proprietary details or attempts to leverage the data in further attacks. Individuals whose information appears in those files could encounter targeted phishing or account takeover attempts if credentials or contact data are present.

What to do if you're exposed

Monitor accounts associated with the organization for unusual activity and enable multi-factor authentication where available. Review bank and credit statements regularly. Individuals can run a free exposure scan of their email address against known breach data to determine whether their information has appeared in previously published datasets. Organizations should follow established incident-response procedures and consult legal and cybersecurity advisors for any required notifications.

AICompiled with AI assistance from public sources and published under our editorial standards.