Powered by MOMENTUM MEDIA
lawyers weekly logo

Powered by MOMENTUMMEDIA

Breaking news and updates daily. Subscribe to our Newsletter
Advertisement

Exclusive: Kiwi car dealership Tristram European listed by DragonForce ransomware

Hackers claim to have stolen and published more than 30 gigabytes of data from Auckland-based Volkswagen, Skoda, and MG-focused dealership.

user icon David Hollingworth
Fri, 28 Feb 2025
Exclusive: Kiwi car dealership Tristram European listed by DragonForce ransomware
expand image

The DragonForce ransomware operation has listed Auckland-based car dealership Tristram European as a victim on its darknet leak site.

The hackers said in a 21 February leak post that they had stolen 33.73 gigabytes of data. At the same time, the full data set – which appears to be legitimate – was posted online.

The data includes employee pay details and timesheets, financial data, maintenance information, and a database containing details of the dealership’s gold-level customers.

Cyber Daily has reached out to Tristram European but has yet to receive a response from the dealership.

Since it was first observed in December 2023, DragonForce has racked up 133 victims – including Tristram European – and is currently the 36th most active ransomware gang based on victim count. Some analysts have suggested the ransomware group is linked to Malaysian hacktivists DragonForce Malaysia, though that appears to be entirely based on the name alone.

However, based on the copy used on the gang’s leak site, the group is likely composed of non-native English speakers.

The group is believed to have some links to the LockBit ransomware operation and engages in double extortion tactics, locking victims out of their data and threatening to publish it online if a ransom payment isn’t received.

DragonForce’s most recent Australian victims were Victorian landscaping firm Super Gardens and Sydney-based healthcare entity Heart Centre.

Tristram European operates several dealerships and service centres around Auckland and is focused on European car brands such as Volkswagen, Skoda, MG, and several others. The company also runs its own financial services team that offers vehicle financing and insurance for both individuals and businesses.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

You need to be a member to post comments. Become a member for free today!

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.