Mullinax Ford Listed by dragonforce Ransomware Group

On December 25, 2025, the ransomware group DragonForce added Mullinax Ford to its leak site, claiming that internal files had been exfiltrated from the Apopka, Florida car dealership during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates the dealership’s internal documents were stolen and are now hosted on the DragonForce leak portal. The exact number of customers or employees whose information was taken remains unknown. Available reporting describes the exposed material as internal files, which in similar incidents often include customer records containing names, addresses, phone numbers, email addresses, driver’s license details, financing agreements, and Social Security numbers.

Mullinax Ford serves customers across central Florida for new and pre-owned vehicle purchases, financing, and service. Any customer who bought, financed, or serviced a vehicle there in recent years could have records included in the stolen data. No official statement from the dealership confirming the breach timeline or full scope had been widely reported at the time of this writing.

Why This Matters for You and Your Family

When a dealership like Mullinax Ford is breached, the data exposed is exactly the kind criminals use to commit identity theft, file fraudulent tax returns, open new credit accounts, or impersonate you with banks and government agencies. If your family has ever purchased or serviced a car there, your personal and financial details may now be in the hands of attackers who sell or publish them.

Children’s information is frequently included in dealership records when parents co-sign loans or add teenage drivers to insurance and registration documents. A single breach can therefore place both adult and minor family members at risk of long-term identity fraud that can follow them for years.

The Doxxing and Identity-Chain Implications

Stolen dealership files rarely stay isolated. Criminals combine names, addresses, phone numbers, and emails with data from other breaches to build detailed profiles. These identity chains let attackers locate social-media accounts, gaming usernames, school records, and family photos. Once mapped, the information can be used for targeted harassment, SIM-swapping, or selling “fullz” packages on dark-web markets.

Credential leaks like this one cascade into account takeovers. A password or security question hint taken from a dealership file can unlock email, banking, or gaming accounts that reuse the same credentials. Gaming accounts belonging to children are especially vulnerable because they often link back to a parent’s email or home address, creating a direct path from the dealership breach to family doxxing.

DragonForce’s Publicly Known Track Record

Public reporting attributes DragonForce with emerging in 2024 as a ransomware-as-a-service operation. The group has claimed responsibility for attacks on organizations across multiple sectors, typically gaining initial access through phishing or exploited remote desktop protocols. After exfiltrating data, DragonForce follows a standard playbook: it demands payment within a short window, then publishes samples or full datasets on its leak site if the victim does not pay. The group’s naming of Mullinax Ford on December 25, 2025 fits this pattern of public extortion following data theft.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what the Mullinax Ford breach connects to.
• Rotate any password you used at Mullinax Ford or any related dealership portal anywhere else it is reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same home address and parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The Mullinax Ford breach is a reminder that everyday transactions can expose your family for years to come. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start protecting what matters most before the next leak appears.