Northern Family Farms Listed by DragonForce Ransomware Group

On March 7, 2026, Northern Family Farms in Merrillan, Wisconsin, appeared on the leak site of the dragonforce ransomware group. The company, a wholesale supplier of Christmas trees and nursery plants since 1955, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, any customers, suppliers, or employees whose details were stored in those files could now face heightened risks of identity theft and doxxing.

Reported Details of the Incident

Public reporting indicates that dragonforce listed Northern Family Farms on its leak site, claiming to have stolen internal files. The company operates from Merrillan, WI, and supplies Fraser Fir, Balsam Fir, White Pine, and various nursery plants to distributors and businesses nationwide. Available reporting describes the incident as a ransomware attack that resulted in data exfiltration, though specific samples of the leaked material have not been independently verified in open sources.

Internal files were taken, which in similar cases often contain customer records, supplier contracts, employee information, and financial documents. No confirmed total of affected individuals has been released by the company or the attackers.

Why This Matters for You and Your Family

When a business like Northern Family Farms suffers a breach, the information exposed can directly affect ordinary families. If you have ever purchased trees, plants, or landscaping supplies from them — or if a family member works with or for the company — your name, address, phone number, email, or payment details may now be in attackers’ hands. These records frequently serve as the starting point for fraud, phishing campaigns, or attempts to access related accounts.