GLOBALMalwareAgriculture & FoodRansomwareDragonforceRansom DemandedActor NamedMedium

Cotswold Fayre

bd_990c3ad70cc2ae3a · schema v1 · pii pii-v1

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group DragonForce on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Agriculture and Food ProductionDiscovered: 2025-03-09

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

Cotswold Fayre was started by Paul Hargreaves in the Early Nineties originally as the wholesale distribution arm of a number of small Cotswold based companies. With the tremendous growth of interest in high quality products that are not available in the multiples during this time, Cotswold Fayre has grown and developed considerably. Cotswold Fayre now supply over 700 customers now and has over 80 suppliers. These suppliers are all speciality producers mainly from the UK, but now some are from as far away as New Zealand and South Africa. NOTE: To view our product range and make an order you need to become a registered customer

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://www.ransomware.live/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2025
Raw hash: 1146bc9855f1ef2cacc617be52c826892bdcc689ba62e25ebf4f33e08e2079a6

Reporting entity

Name: dragonforce

Victim entity

Name: Cotswold Fayre
norm: cotswold fayre
Domain: cotswold-fayre.co.uk
Industry: Agriculture & Food

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· dragonforce
Threat actor: DragonforceExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.