VoiceTeam Call Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 8, 2025, the ransomware group dragonforce listed VoiceTeam Call on its leak site, claiming to have obtained internal files during a ransomware operation against the company. Public information on the number of individuals affected, the volume of data involved, or the precise timing of the intrusion remains undisclosed.

Incidents of this kind occur against a backdrop of sustained ransomware activity targeting service providers that handle customer interactions. When such organizations are affected, the consequences can extend beyond the immediate victim to the clients and individuals whose communications are processed through those systems.

Inside the incident

The only confirmed public detail is the listing itself on December 8, 2025. The group asserts that internal files were exfiltrated during a ransomware attack. No information has been released on the date the intrusion began, the duration of access, the method of initial compromise, or the quantity of material taken. The number of people whose information may be involved is also unknown.

The group behind it: dragonforce

Dragonforce is a ransomware operation that publicly claims victims by posting details on a dedicated leak site. Groups of this type typically encrypt systems and threaten to release stolen data unless a ransom is paid. Their listings function as a form of pressure rather than independently verified proof of the scope or authenticity of any claimed breach.

In this instance the group claims VoiceTeam Call as a victim. No independent confirmation of the data’s contents or the circumstances of its acquisition has been made public.

About VoiceTeam Call

VoiceTeam Call is a nearshore business-process outsourcing provider headquartered in Santiago, Dominican Republic, with operations in San Francisco, California. The company supplies sales, customer-service, and back-office support, primarily to clients in the United States. Its workforce consists of agents who have previously lived in the U.S., and the firm states that its quality-assurance processes record 100 percent of calls and chats.

Organizations in this sector routinely process large volumes of customer conversations, account details, and internal operational records. A compromise at such a provider can therefore affect both the company’s own systems and the data of its client organizations.

What data was at risk

The only data category named in connection with the listing is “internal files exfiltrated in ransomware attack.” No further inventory of file types, customer records, or call recordings has been disclosed. While companies of this kind commonly hold contact information, call recordings, and client account data, the exact contents of any material taken in this case remain unconfirmed.

The real-world impact

Individuals whose information appears in internal files held by a customer-service provider may face risks of targeted phishing or account misuse if those files later circulate. Client organizations that rely on VoiceTeam Call could experience secondary exposure of their own customer interactions. For the company itself, the incident adds operational disruption and potential loss of client confidence, though the scale of either effect is not yet known.

Were you affected?

Begin by monitoring official statements from VoiceTeam Call and any client companies that use its services. Change passwords for any accounts linked to services handled through the provider and enable multi-factor authentication where available. Readers can also run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.