Jac Vandenberg Listed by dragonforce Ransomware Group

On February 24, 2026, fresh-produce supplier Jac Vandenberg appeared on the leak site of the dragonforce ransomware group. The company, which supplies citrus, grapes, pome fruits, and stone fruits to grocery stores across the United States, had internal files exfiltrated during a ransomware attack.

Reported Details from Reporting

Public reporting indicates that dragonforce listed Jac Vandenberg on its leak site and published samples of allegedly stolen internal documents. The exact number of files and the total volume of data remain undisclosed. Available reporting describes the incident as a classic ransomware operation in which the attackers first gained access, exfiltrated data, and then threatened to publish it unless a ransom was paid. No confirmed evidence has surfaced showing that customer personal information was taken, yet the presence of internal files on a ransomware leak site is enough to warrant attention from anyone whose data may have touched the company’s systems.

Why This Matters for You and Your Family

When a supplier like Jac Vandenberg is hit, the ripple effects reach ordinary families. Grocery chains across the country rely on the company for everyday fruit purchases. If your name, address, phone number, or payment details ever appeared in Jac Vandenberg’s vendor files, employee records, or customer lists, those details may now sit in the hands of criminals. Internal files often contain spreadsheets that mix business contacts with personal information. Once that material leaves a secure environment, it can surface months or years later in fraud attempts, phishing campaigns, or identity-theft schemes that target you and your family.

The Doxxing and Identity-Chain Risks

Stolen internal files frequently include email addresses, phone numbers, and account handles that link together. Attackers map these fragments into a single profile, then move from one service to another. A credential exposed in this claimed breach can unlock your email, which then reveals your children’s gaming usernames, which in turn expose family photos, home addresses, and school details. This cascading exposure is exactly how doxxing campaigns begin. Credential leaks like this one routinely cascade into account takeovers and doxxing chains, especially when gaming accounts belonging to children share the same password or recovery email as a parent’s work or vendor account.

Dragonforce’s Publicly Known Track Record

Public reporting attributes the dragonforce ransomware group with operations that emerged in recent years. The group is known for targeting mid-sized companies, exfiltrating data before encrypting systems, and then pressuring victims through leak-site publication. Their typical playbook involves initial access through common vulnerabilities or stolen credentials, followed by rapid data theft and extortion demands that include both ransom payment and silence. Notable prior victims have spanned various industries, though specific earlier cases are still being catalogued by threat trackers.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used at Jac Vandenberg or any related vendor portal anywhere it is reused, and switch on 2FA through an authenticator app instead of text messages.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and recovery emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The Jac Vandenberg listing is a reminder that supply-chain breaches now reach deep into ordinary households. Taking concrete steps today limits how far criminals can travel with your information tomorrow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and family coverage that includes children’s gaming accounts. Start your DoxxScan trial and close the gaps before the next wave of leaks finds you.