McKee-Pownall Equine Services Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 16, 2025, the ransomware group dragonforce listed McKee-Pownall Equine Services on its leak site and claimed to have taken internal files from the organization. The number of individuals whose information may be involved remains unknown, and no confirmation of the data’s contents or any subsequent distribution has been made public. The incident highlights the exposure risks faced by clients and staff of specialized veterinary practices that maintain records on animals, owners, and clinical operations.

Breaking down the breach

Public reporting indicates only that dragonforce added McKee-Pownall Equine Services to its leak-site listing on December 16, 2025. The group claims internal files were exfiltrated during a ransomware attack. No figures for the volume of data, the number of affected individuals, or the timeline of the intrusion have been disclosed. The organization has not issued a public statement confirming or disputing the listing.

Inside dragonforce

Dragonforce is a ransomware operator that follows the common pattern of encrypting systems and exfiltrating data before listing victims on a dedicated leak site. The group’s listings serve as a public claim of access, intended to pressure organizations into negotiations. Similar claims by the same actor have appeared against entities in multiple sectors, though each listing remains an unverified assertion until corroborated by the victim or independent investigation.

Who is McKee-Pownall Equine Services?

McKee-Pownall Equine Services provides veterinary care focused on horses, including lameness evaluation, sport-horse medicine, pre-purchase examinations, dentistry, and wellness services. The practice operates locations in Campbellville, Caledon, and Uxbridge, Ontario, and employs 17 veterinarians along with more than 35 support staff. It also maintains an Equine Performance Centre for diagnostic assessment of performance-related issues. Organizations of this type routinely collect and store owner contact details, billing information, and detailed medical histories for the animals under their care.

What was likely exposed

The only data category named in connection with the listing is internal files exfiltrated during the reported ransomware attack. The precise contents of those files have not been disclosed. Veterinary practices of this scale typically hold client names, addresses, payment records, and equine medical documentation, yet the exact categories present in the claimed exfiltration remain unconfirmed.

Why it matters

Records held by equine veterinary services can contain personal identifiers and financial details of horse owners as well as sensitive clinical information. Unauthorized access to such material may enable targeted fraud, identity misuse, or unwanted disclosure of private circumstances. For the organization, the incident adds operational disruption and potential regulatory obligations under applicable privacy legislation, regardless of whether the listed files are later verified or released.

Were you affected?

Individuals who have used McKee-Pownall Equine Services can take the following steps while awaiting further information from the organization:

• Monitor bank and credit-card statements for unusual activity.
• Place fraud alerts or credit freezes with major credit bureaus if financial details were provided to the practice.
• Contact the practice directly to ask what categories of client data were stored and whether any notification process has begun.
• Run a free exposure scan of their email address against known breach repositories to check for prior appearances of the same address.

No public timeline for victim notification has been released.

AICompiled with AI assistance from public sources and published under our editorial standards.