Brian Cox

Brian Cox was compromised in a ransomware attack attributed to dragonforce in June 2026. The organization, operating in the Not Found sector in United Kingdom, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Established in 1984, Brian Cox & Company is a leading estate agent in Middlesex, specializing in residential lettings and property management. With six local offices, they provide maximum exposure for homeowners seeking buyers or tenants. Their services include property valuation and a wide range of property types for rent and sale. The company caters to clients in Harrow, Sudbury, Greenford, and Northolt.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.