O&S Associates Listed by DragonForce Ransomware Group

On February 4, 2025, architectural and engineering firm O&S Associates appeared on the leak site of the dragonforce ransomware group. The New Jersey-based company, founded in 1996, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, anyone whose personal or professional data was stored in the firm’s systems could be affected.

What Public Reporting Shows

Public reporting indicates that O&S Associates, headquartered in Hackensack, New Jersey, had files removed by the attackers. The firm provides architectural, engineering, and planning services across the United States. Available reporting describes the incident as a ransomware attack in which data was allegedly exfiltrated before encryption or as part of an extortion attempt. No confirmed total of records or specific categories of personal information has been released by the company or the group.

Why This Matters for You and Your Family

When a company like an architecture or engineering firm is breached, the files often contain names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, and financial details of clients, employees, vendors, and their families. If your home plans, property records, or business contracts passed through O&S Associates, your information may now be in the hands of criminals. One breach can expose an entire household because family members frequently share addresses, phone numbers, and email accounts.

Even if you never directly hired the firm, your data can appear in vendor lists, employee directories, or project documentation. Criminals do not need a large number of records to cause harm; a single accurate address paired with a phone number is enough to begin targeted fraud or harassment.