RANSOMWARE VICTIMDUPLICATE CLAIM

1171 Rue Notre Dame O, Victoriaville, QC G6P 7L1, Canada. (819) 758-0313

soteck.com
dragonforce📍 Canada (CA)📅 January 15, 2026
1
linked CVEs
8
same group

Attack Intelligence

1171 Rue Notre Dame O, Victoriaville, QC G6P 7L1, Canada. (819) 758-0313 was compromised in a ransomware attack attributed to dragonforce in January 2026. The organization, operating in an undisclosed sector in Canada, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Soteck specializes in air treatment, automation, industrial refrigeration, and energy efficiency, catering specifically to the agri-food sector. They provide comprehensive engineering solutions to help clients maintain optimal production conditions for quality products. With over 25 years of experience serving North American food processing plants, their team guarantees performance and client satisfaction. Soteck focuses on creating stable environments to enhance operational efficiency for both agri-food and industrial clients

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.

Additional Details

Correlated Vulnerabilities (1)

Other Victims — dragonforce (8)

Quick Facts

CountryCanada (CA)
Attack DateJan 15, 2026
Domainsoteck.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

dragonforce
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.