Lincoln Green Brewing
Attack Intelligence
Lincoln Green Brewing was compromised in a ransomware attack attributed to dragonforce in March 2026. The organization, operating in the Manufacturing sector in United Kingdom, was added to the group's data leak site as part of an extortion campaign.
dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Lincoln Green Brewing Company Ltd. specializes in crafting a wide range of beers, including core, occasional, and special brews, available for online purchase. Their offerings also include cases of bottles, cans, mini-kegs, and thoughtful gifting options for beer enthusiasts. The company aims to serve customers through free delivery on orders over £55 within the UK and encourages collection from their various pubs. Additionally, Lincoln Green emphasizes quality and offers insights into their brewing philosophy and process, catering both to individual consumers and businesses
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.