Linked to the LAPSUS$ threat group

Dragonforce is a malware/ransomware variant that encrypts files on targeted systems and demands payment for a decryption key.

Hackers linked to Scattered Spider and ShinyHunters (also known as UNC6040) exfiltrated over 2.8 million Allianz Life customer and partner records via third-party attack via Salesforce.

The breach involved an exploit through a Salesforce-connected system.

Business email compromise allowed attackers to make off with personally identifiable information.