Sayre Associates

Sayre Associates was compromised in a ransomware attack attributed to dragonforce in June 2026. The organization, operating in the Business Services sector in United States, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

(Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.