Greenway Technologies

Greenway Technologies was compromised in a ransomware attack attributed to dragonforce in May 2026. The organization, operating in the Technology sector in Germany, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Greenway Technologies is a leading fire protection company based in Phoenix, AZ, specializing in a comprehensive range of services including fire suppression systems, alarms, sprinklers, and smoke control. Established in 2010, the company provides tailored fire protection design, installation, maintenance, and inspection services aimed at ensuring the safety of properties across the federal and commercial sectors. With a strong commitment to innovative, code-compliant solutions, Greenway Technologies aims to protect lives and property through their top-tier services. Their expert team is dedicated to delivering reliable, high-quality fire protection systems that meet the unique needs of their clients

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.