Ransomware: dragonforce claims NewNet (SA) — Telecommunication

On July 18, 2026, a ransomware group known as Dragonforce publicly claimed responsibility for a cyberattack against NewNet (SA), a telecommunications provider. The claim was published on the ransomware.live leak site, which is a platform used by threat actors to disclose stolen data. This incident falls under the BREACH framework, indicating a confirmed data compromise involving unauthorized access and potential exfiltration of sensitive information.

The primary affected organization is NewNet (SA), operating in the telecommunications sector. However, this breach has broader implications for any entity that relies on NewNet’s services, including business customers, government agencies, and individual subscribers. The telecommunications sector is critical infrastructure, meaning such an incident can disrupt communications, expose customer data, and trigger regulatory obligations under frameworks like GDPR or national data protection laws.

Compliance teams should immediately verify whether their organization has any data processed or stored by NewNet. If so, conduct a risk assessment to determine if personal data was exposed, and prepare to notify relevant supervisory authorities and affected individuals within legal timeframes. Additionally, review incident response plans, ensure ransomware-specific playbooks are updated, and reinforce employee training on phishing and credential theft, as these are common vectors for ransomware groups like Dragonforce.