RANSOMWARE VICTIMHOSPITALITY AND TOURISM

Taos Mountain Casino

taosmountaincasino.com

dragonforce📍 United States (US)📅 May 30, 2026

linked CVEs

same group

Attack Intelligence

Taos Mountain Casino was compromised in a ransomware attack attributed to dragonforce in May 2026. The organization, operating in the Hospitality and Tourism sector in United States, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe known for its ancient, historic adobe pueblo.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.

Correlated Vulnerabilities (1)

CVE-2025-5777HIGHCVSS 7.5⚠ KEVEPSS 74%

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Other Victims — dragonforce (8)

P. A. Inc. (Performance Alloys)

US · Manufacturing

Aug 2026

Mike Graham Heating And Air Conditioning

US · Professional Services

Katathani Phuket Beach Resort

TH · Hospitality

Jul 2026

Quick Facts

CountryUnited States (US)

SectorHospitality and Tourism

Attack DateMay 30, 2026

Domaintaosmountaincasino.com

Intel Sourceransomware.live

Threat Group

dragonforce

Motivation: financial

View group profile →

External Links

Leak Site → Screenshot (RansomLook) Google (news) Search CTI.watch

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.

← All Victims·Threat Actors·Vulnerabilities