WG Neukölln

WG Neukölln was compromised in a ransomware attack attributed to dragonforce in May 2026. The organization, operating in the Not Found sector in Germany, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

WG Neukölln eG is a cooperative based in Berlin that offers various housing options and services, including apartments and residential projects. The organization is committed to social engagement and provides a venue for events, as well as support for its members through social management. They focus on sustainable energy projects and aim to enhance the living experience for their tenants. Their intended clients include individuals and families seeking affordable housing solutions in the Neukölln area.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.