Unipres Alabama Inc.
Attack Intelligence
Unipres Alabama Inc. was compromised in a ransomware attack attributed to dragonforce in December 2025. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.
dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Unipres is a leading manufacturer of press-formed automotive components in the world. It designs, develops and offers car body structural parts, including upper and lower car body parts, bumper parts, front side members, steering members , fuel tanks and transmission products.It started working in United Kingdom in 1987 and is headquartered in Sunderland. The company is a wholly owned subsidiary of Unipres Corporation
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.