Cheoy Lee Shipyards

Cheoy Lee Shipyards was compromised in a ransomware attack attributed to dragonforce in June 2026. The organization, operating in the Manufacturing sector in HK, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Cheoy Lee Shipyards Ltd. specializes in the design and manufacturing of a diverse range of vessels, including tugs, ferries, crew boats, pilot boats, and luxury yachts. Their state-of-the-art facility in Zhuhai, China, is equipped with advanced machinery, enabling the production of high-quality vessels up to 70 meters in length. The company serves a global clientele, focusing on maritime industries that require innovative and efficient solutions for various operational needs. Cheoy Lee is committed to excellence, sustainability, and employee welfare, fostering a strong community within their workforce.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.