ABM Wireless INC Listed by dragonforce Ransomware Group

On August 30, 2025, the ransomware group DragonForce added ABM Wireless INC to its leak site and began publishing what it claims are the company’s internal files. InScope, the New York-based master dealer for AT&T that operates under the ABM Wireless name, serves thousands of wireless customers across the Tri-State area. Any personal information those customers provided — names, addresses, phone numbers, account details, and payment records — may now sit in the hands of attackers.

What's Publicly Reported from Reporting

Public reporting indicates DragonForce exfiltrated internal documents from InScope’s systems before encrypting them. The company, founded in 2002, acts as one of the largest AT&T master dealers in New York, New Jersey, and Connecticut. It also ranks among the top U.S. sellers of wireless accessories. Available reporting describes the posted material as “internal files” without specifying the exact volume or types of customer records. No confirmed total of affected individuals has been released by the company or the attackers.

Why This Matters for You and Your Family

When a wireless dealer’s systems are breached, the data exposed often includes contact details and account information that can be used to impersonate you with your carrier, open fraudulent lines, or file fake warranty claims. Customer records from master dealers frequently contain billing addresses, device IMEIs, and payment card data that remain valuable on underground markets long after the initial leak. For families, this can mean unexpected charges on mobile bills, unauthorized porting of phone numbers, or phishing texts that appear to come from a trusted provider. Children’s lines added to family plans are equally exposed, turning one breach into repeated risks across every linked account.

The Doxxing and Identity-Chain Implications

Ransomware leaks like this one rarely stop at the first company. Attackers harvest email addresses, phone numbers, and usernames, then cross-reference them against other breaches. A single credential from your InScope account can unlock linked gaming profiles, social media handles, or school portals. These connections create an identity chain that lets threat actors map your digital footprint back to your real name and home address. Public reporting shows such chains frequently lead to doxxing, SIM-swapping, or targeted extortion. Gaming accounts belonging to children are especially vulnerable because parents often reuse passwords or security questions across family services.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce’s emergence to late 2023. The group has since listed dozens of organizations ranging from regional healthcare providers to manufacturing firms and retailers. Its typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by exfiltration of sensitive files and deployment of ransomware. After encryption, the group posts samples on its leak site and demands payment to prevent full publication. Extortion pressure is applied through countdown timers and selective release of documents. Exact success rates remain unclear, but the group continues to maintain an active leak site that lists new victims weekly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the included cleanup of data broker listings tied to the breach.
• Rotate any password you used at InScope or ABM Wireless wherever it appears, replace it with a unique passphrase, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and parent emails leaked in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal documents or images that surface on forums or broker sites.

The incident underscores a simple reality: one retailer’s breach can ripple outward and expose your family for years unless you actively break the identity chains. Start your DoxxScan trial today. Its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage give you and your family a practical defense against the cascade that follows credential leaks like the one at ABM Wireless.