Ransomware group dragonforce hits Framon S.p.A.
Framon S.p.A. — a manufacturing target operating in IT has been listed by the dragonforce ransomware group on 2025-07-31. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Framon S.p.A. |
|---|---|
| Threat Group | dragonforce |
| Summary | Framon S.p.A., a manufacturing organization in Italy, was listed by the dragonforce ransomware group on its leak site on 2025-07-31. |
| Date of Breach | 2025-07-31 |
| Discovery Date | 2025-07-31 |
| Region | IT |
| Target Domain | framon.it |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by dragonforce
FRAMON S.p.A. is an important company that since 1973 is present in the worldwide market as one of the main manufacturing company of non-ferrous casting components for the furniture and lighting industry. It has three catalogues with about 10.000 articles ; a very good part of them is available in the warehouse. FRAMON S.p.A. is a very flexible " foundry " that makes use of some of the most important technologies of transformation of the raw materials, like die-casting, gravity casting with and without core, hot stamping; mainly product are made with aluminium, brass, zama and plastic. With the support of an internal designer and qualified technicians, today FRAMON S.p.A. is able to conceive, propose and develop new articles starting with the realization of drawings and possible prototypes, creating projects and stamps, up to the concrete manufacturing also under customer exclusive projects and design.
Posted by the dragonforce threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
framon.it
Leak post (onion / Tor)
http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=14b04226-a8b7-4df9-93e3-48186c952000
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.