Betesan

Betesan was compromised in a ransomware attack attributed to dragonforce in February 2026. The organization, operating in an undisclosed sector in TR, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Betesan is a leading engineering company established in 1992 in Tuzla, specializing in ship electrical contracting and supply of electrical materials. The company offers innovative and high-quality solutions in ship power and automation systems, electrical panels, and control consoles, catering to the maritime and industrial sectors. Betesan also provides tailored solutions for military maritime needs, energy transmission, and processing industries, ensuring reliability and efficiency. With over 30 years of experience, Betesan serves a diverse clientele, including ship owners and operators, industrial facilities, and military forces.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.