Division 10 Listed by dragonforce Ransomware Group

On November 30, 2025, Division 10 Inc., a Memphis-based supplier of specialty construction products, appeared on the leak site of the dragonforce ransomware group. The company, which has served contractors, automotive firms, and other clients since 1989, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, anyone whose data passed through Division 10’s systems—including customers, vendors, and employees—may now be at risk.

What Public Reporting Shows

Public reporting indicates that Division 10’s internal files were stolen and later listed for download or extortion on the dragonforce leak site. The company provides product sales, estimating services, and installation quotes to the construction industry. Available details confirm the breach involved exfiltration of internal documents rather than a simple encryption event. No precise count of affected records or individuals has been disclosed. The listing appeared on November 30, 2025, according to the primary source hosted on an onion domain and mirrored by ransomware tracking services.

Why This Matters for You and Your Family

When a company like Division 10 suffers a breach, the information exposed often includes names, addresses, phone numbers, email accounts, and business correspondence that can be repurposed against ordinary people. If you or your family have done business with a construction supplier, worked with a contractor who used Division 10’s estimating services, or had your information stored in their systems, that data can surface in unexpected places. Stolen internal files frequently contain spreadsheets or PDFs that link personal details to home addresses, making it easier for criminals to target you with phishing, identity theft, or physical threats. Your family’s privacy is directly affected even if you never visited their Memphis headquarters.

The Doxxing and Identity-Chain Implications

Exfiltrated internal files rarely stay isolated. Criminals combine leaked emails, phone numbers, and addresses with information from other breaches to build detailed profiles. A single credential exposed in this incident can unlock accounts across multiple services, especially if you reuse passwords. Public reporting shows these chains often lead to doxxing, where attackers publish personal information online or harass victims through linked social-media handles and family details. Gaming accounts belonging to you or your children are particularly vulnerable because usernames and passwords stolen from one breach frequently work on Steam, Roblox, Epic Games, or Discord, turning a corporate ransomware incident into direct exposure for minors.

Dragonforce’s Publicly Known Track Record

Public reporting attributes the attack to the dragonforce ransomware group. The group emerged in recent years and has targeted organizations across multiple sectors with a playbook that typically includes initial access through phishing or exploited vulnerabilities, followed by data exfiltration and extortion. Their approach often involves listing stolen files on dark-web leak sites when victims do not pay, aiming to pressure companies by threatening to release sensitive information. Notable prior victims have included companies in manufacturing, technology, and professional services, though exact details vary by incident. The group’s tactics emphasize speed of publication once a deadline passes.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used with Division 10 or its related vendors anywhere it has been reused, and switch on 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests for any exposed personal information appearing on data broker sites or forums.

The incident underscores that corporate breaches continue to place ordinary families in the crosshairs long after the initial attack fades from headlines. Starting protective steps now can limit how far this leak travels. DoxxScan by GalaxyWarden delivers continuous monitoring across more than 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping that connects online handles to real-world identities, and hands-on remediation by specialists who handle takedowns, including protection for your family and children’s gaming accounts that frequently become targets once credential leaks cascade into account takeovers and doxxing chains.