Areco

Areco was compromised in a ransomware attack attributed to dragonforce in June 2026. The organization, operating in the Not Found sector in Sweden, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Areco Steel is the parent company of the privately-owned Areco Group, which includes five divisions: Areco Metals, Areco Profiles, Areco Direct, and Areco Properties. The company's business idea is to develop, manufacture, and globally market products and services tailored to the needs of industries. Their product offerings include various types of metals, profiles, and construction materials. Areco Steel aims to serve a diverse range of industrial clients with innovative solutions.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.