Amla Commerce Listed by DragonForce Ransomware Group

On December 16, 2025, the ransomware group DragonForce added Amla Commerce to its leak site, claiming that internal files had been exfiltrated from the company behind popular ecommerce platforms Artifi Labs and Znode.

What Public Reporting Shows

Public reporting indicates that DragonForce claims to have stolen internal documents during a ransomware attack on Amla Commerce. The company develops and maintains ecommerce software used by hundreds of mid-market and enterprise retailers. Its subsidiaries include Artifi Labs, an enterprise product customization platform, and Znode, a .NET-based headless ecommerce solution with multi-store capabilities. Available reporting describes the exposed material as internal files, though the precise volume and exact data types remain unconfirmed by independent verification. The listing appeared on the group’s leak site on December 16, 2025.

Why This Matters for You and Your Family

When software providers like Amla Commerce suffer breaches, the consequences often reach far beyond the company itself. Customers, partners, and anyone whose personal or payment information flows through Artifi- or Znode-powered stores may find their data indirectly exposed. Internal files frequently contain customer records, order histories, contact details, and credentials that can be reused elsewhere. For ordinary families this means heightened risk of identity theft, unexpected charges, or phishing attacks that feel personal because attackers already hold real details from sites where you shop. Children’s accounts linked to family email addresses or shared payment methods become especially vulnerable.

The Doxxing and Identity-Chain Implications

Credential leaks from ecommerce platforms rarely stay isolated. A single exposed email and password combination can unlock accounts across shopping sites, social media, gaming services, and email itself. Attackers map these connections into identity chains that link your username, phone number, home address, and family members’ details. Public reporting indicates such chains frequently lead to doxxing, swatting, or targeted harassment. Gaming accounts belonging to you or your children are particularly attractive targets because they often share the same passwords or recovery emails used for online shopping, allowing one breach to cascade into full account takeovers.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce’s emergence to 2024. The group has targeted organizations across multiple sectors, typically gaining initial access through phishing or exploited vulnerabilities, exfiltrating data, then deploying ransomware. Its playbook follows a double-extortion model: encrypt victim systems and threaten to publish stolen files unless a ransom is paid. Notable prior victims include various mid-sized enterprises whose internal documents later appeared on the same leak site. Exact success rates and total victims are difficult to verify, but the group maintains an active presence on dark-web leak portals.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so hidden connections become visible.
• Rotate any password you used on Artifi- or Znode-powered stores and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught in hours, not months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts which often chain back to the same credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing your accounts.

The speed with which ransomware groups like DragonForce publish stolen data leaves little room for delay. One practical step today can prevent months of fallout tomorrow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that protects both adult accounts and children’s gaming profiles. Start your DoxxScan trial and close the gaps before the next breach finds you.