IACC Holdings Listed by dragonforce Ransomware Group

On April 4, 2025, the ransomware group known as dragonforce added IACC Holdings to its public leak site, claiming that internal files had been exfiltrated from the privately owned Egyptian investment company focused on shipping and logistics.

What's Publicly Reported from Reporting

Public reporting indicates that IACC Holdings, originally founded in 1979 as International Associated Cargo Carrier by Mostafa El Ahwal, was listed after a ransomware deployment. The data exposed consists of internal files exfiltrated during the attack. The number of people whose information appears in the files remains unknown. No specific deadline for payment has been publicly detailed in available reporting, though ransomware groups routinely set short windows before full data publication.

The listing appears on the dragonforce leak site, hosted on the dark web, and was first tracked by ransomware.live. IACC Holdings has not issued a public statement confirming the breach at the time of writing.

Why This Matters for You and Your Family

When a company like IACC Holdings suffers a breach, the information inside its files can include details about partners, vendors, employees, or customers. If your name, address, email, phone number, or financial records are among them, those details may now be in the hands of criminals. Internal files from logistics and investment firms often contain contracts, invoices, personal identification numbers, and correspondence that can be pieced together to build a profile of you or members of your family.

Once that data reaches the open criminal market, it rarely stays contained. A single leak can trigger months or years of follow-on fraud, spam, phishing, and identity theft attempts directed at you and your household.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. Criminals use stolen data to map connections between corporate records and personal accounts. An email address found in an IACC Holdings file can be cross-referenced with credential leaks from other services, revealing logins used on shopping sites, banks, or social media. This creates an identity chain that leads directly to you and, in many cases, to your children.

Credential leaks like this one cascade into account takeovers and doxxing chains. Gaming accounts belonging to teenagers or younger children are especially vulnerable because kids often reuse passwords or email addresses tied to family information. A compromised Roblox, Fortnite, or Steam account can quickly expose chat logs, voice recordings, home addresses entered for shipments, and linked parent accounts.

Dragonforce Group's Publicly Known Track Record

Public reporting attributes the dragonforce ransomware operation to a group that emerged in late 2023. The group has targeted organizations across multiple sectors, with notable prior victims including manufacturing, healthcare, and logistics companies. Their typical playbook begins with initial access gained through phishing, remote desktop protocol exploitation, or purchased credentials. Once inside, they exfiltrate sensitive files before deploying ransomware. Extortion follows a double-pressure model: demanding payment to prevent file publication and, in some cases, threatening to contact the victim’s customers or partners directly.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this leak exposes about you and your family.
• Rotate any password you used at IACC Holdings or any related vendor account, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes children’s gaming accounts that often chain back to the same addresses and emails appearing in corporate leaks.
• Let remediation specialists handle the follow-up work, including sending takedown requests to data brokers and monitoring for resale of the IACC Holdings files.

The speed with which ransomware groups move stolen data means you cannot afford to wait for official notifications. Taking concrete steps now limits how far this claimed breach can reach into your life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your family, including children’s gaming accounts vulnerable to credential-based takeovers.