Inside Passage Electric Cooperative, Inc
dragonforce listed this organization on its leak site on Oct 26, 2026.
- Listing date
- Oct 26, 2026
- Attack date
- Oct 26, 2026
Listing text
In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is a non-profit, independent electric utility owned by the members we serve. Electric cooperatives are democratically governed businesses, ensuring they are closely regulated by their consumers. Members of electric cooperatives express higher than average levels of customer satisfaction since they put customers first because the consumers are the owners. In addition, co-ops are locally owned and operated which makes IPEC more responsive to our members since they are the owners and we are accountable to them. IPEC is governed by a board of directors elected from the membership, which sets policies and procedures that are implemented by the cooperatives’ professional staff. Our Board is committed to providing quality, dependable and affordable electric service to our members since they live in the communities they represent. IPEC currently serves Hoonah (463 services), Kake (321 services), Chilkat Valley (231 services), Angoon (227 services) and Klukwan (61 services) for a total of 1,303 customers.
About the group
dragonforce posted its first listing on Dec 13, 2023 and has listed 677 organizations to date.
DragonForce is a major ransomware-as-a-service operation first observed in August 2023 that launched a formal affiliate program offering 80% revenue share, then rebranded as a "ransomware cartel" in 2025, gaining notoriety for high-profile attacks on UK retailers Marks & Spencer, Co-op, and Harrods.
Learning center
What does this listing mean?
Ransomware groups move data out of the organization before encrypting systems and threaten to publish it if the ransom is not paid. This method is called double extortion.
The listing shows that the group claims to have targeted the organization. Whether the data was published is shown by the later status of the listing.
What should you do if your organization is listed on a leak site?
- Record the listing and any published sample files; do not visit the leak site from the corporate network.
- Isolate affected systems and preserve logs without deleting them.
- Determine which data left the organization; if personal data is involved, review notification obligations with your legal team.
- Make any decision about the ransom demand together with legal, management and incident response.
- Do not bring systems back online before the attacker’s entry point is closed.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainIntelligence 360
Customer intelligence on top of Infostealer Detection: leaked accounts of end users who sign in to your site.