RANSOMWARE VICTIMCONSTRUCTION

The Schuett Companies

dragonforce📍 United States (US)📅 July 10, 2026
1
linked CVEs
8
same group

Attack Intelligence

The Schuett Companies was compromised in a ransomware attack attributed to dragonforce in July 2026. The organization, operating in the Construction sector in United States, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

The Schuett Companies, Inc. is a family-owned business with over 50 years of experience specializing in affordable housing for seniors, individuals with disabilities, and families. They manage approximately 1,600 housing units across Minnesota, North Dakota, and South Dakota. Since 1968, they have also offered Home Health Care services through their CompassionCare program, ensuring residents can age in place comfortably. The company's commitment to providing a supportive community emphasizes the importance of a stable home for a healthy life.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.

Additional Details

Correlated Vulnerabilities (1)

Other Victims — dragonforce (8)

Quick Facts

CountryUnited States (US)
SectorConstruction
Attack DateJul 10, 2026
Intel Sourceransomware.live

Threat Group

dragonforce
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.