Elite Screens Inc. Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Elite Screens Inc., a California-based manufacturer of projection screens, was listed on February 13, 2026, by the ransomware group dragonforce. The listing states that internal files were exfiltrated during a ransomware attack. No confirmed count of affected individuals has been released, and details on the timing, method, or full scope of the incident remain undisclosed.

What happened

The incident surfaced through a listing on a site associated with the dragonforce group on the reported date of February 13, 2026. The group claims responsibility for exfiltrating internal files from Elite Screens Inc. as part of a ransomware operation. Public information does not include confirmation of the attack from the company, nor does it specify the volume of data, the exact date range of the intrusion, or whether encryption of systems occurred alongside the exfiltration. The number of people whose information may be involved is listed as unknown.

Who is dragonforce?

Dragonforce operates as a ransomware group that typically uses double-extortion tactics, encrypting victim systems while also removing data and threatening its release. The group maintains a leak site where it posts claims about organizations it says it has targeted. Such listings represent the group’s assertions rather than independently verified events. Dragonforce has appeared in public reporting on multiple incidents involving commercial entities, though specific claims tied to any single victim require separate confirmation.

Elite Screens Inc. and its sector

Elite Screens Inc. was founded in 2004 and maintains its world headquarters in California, with additional offices in Australia, China, France, Germany, India, Latvia, Mexico, Japan, and Taiwan. The company manufactures projection screens for retail, commercial, and custom integrator channels, distributing products through authorized partners worldwide. Manufacturing firms of this type routinely maintain records related to supply chains, customer accounts, employee information, and technical specifications for their products.

What data was at risk

The only data category named in connection with the listing is internal files exfiltrated during the claimed ransomware attack. The precise contents of those files have not been disclosed. Organizations in the manufacturing sector commonly hold customer contact details, order histories, financial records, employee data, and proprietary design information. Without a claimed inventory from the incident, the exact categories and sensitivity levels of any exposed material remain unconfirmed.

Why it matters

Exposure of internal files can create downstream risks for individuals whose information appears in those records, including potential misuse for fraud or targeted phishing. For the organization, the event may affect operational continuity, partner relationships, and regulatory obligations depending on the jurisdictions involved. Because the scale of exposure is not yet known, the practical impact on any specific person or business partner cannot be quantified from available information.

What to do if you're exposed

Individuals concerned about possible exposure should monitor their financial and email accounts for unusual activity and consider enabling multi-factor authentication on important services. Reviewing credit reports and placing fraud alerts with major bureaus can provide additional protection. Readers may also run a free exposure scan of their email address against known breach data to check for appearances in previously published incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.