A ransomware group calling itself DragonForce claims to have carried out an attack against Homewood Sales, according to a listing on the group’s own dark web leak site dated September 4, 2026. The claim was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, Homewood Sales has not issued any public confirmation of the incident, and no regulator has verified the group’s claim. This report describes only what the group has posted, not an established fact.
What we know — and don’t
- A group identifying itself as DragonForce listed Homewood Sales on its leak site with a claimed date of September 4, 2026.
- Homewood Sales operates in a sector categorized here as ‘other’; specific business details tied to this claim have not been independently verified.
- The specific types of data the group claims to have obtained — such as financial records, customer information, or employee data — have not been disclosed or confirmed by any party.
- There is no independent confirmation from Homewood Sales, law enforcement, or a data protection regulator at the time of writing.
What should you do if you have an account with this company?
- Change your password for any account associated with Homewood Sales, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, particularly for email and financial accounts.
- Watch closely for phishing emails or unexpected calls referencing Homewood Sales, as criminals sometimes exploit breach claims to trick people into revealing personal information.
- Consider signing up for an identity monitoring service like a service like Aura or LifeLock to get alerted if your personal information appears in places it shouldn’t.
- Review recent account statements and activity for anything unusual, and report suspicious transactions right away.
BreachLetter will update this page if Homewood Sales confirms the incident, if new details emerge from the group’s claims, or if the matter is officially reported to a data protection regulator.