Wayco Inc

Wayco Inc was compromised in a ransomware attack attributed to dragonforce in February 2026. The organization, operating in an undisclosed sector in United States, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Wayco, Inc. is a family-owned company with over 50 years of experience providing full-service paving solutions in northeastern Pennsylvania. Their extensive offerings include asphalt paving, oil chipping, aggregate sales, concrete services, excavating, and utility site work. The company prides itself on its knowledgeable staff, including licensed engineers for project consultation, and is a PA State Certified Contractor with products approved by PennDOT. Wayco, Inc. caters to clients in need of paving and construction services, ensuring high-quality results through a dedicated team.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.