Construction / Real Estate Ransomware Victims & Data Breaches
Breach House is tracking 1236 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1236Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 1 / 13
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Powder River Heating & Air Conditioning View Details | qilin | United States | ||
| Ransomware | Wring Group View Details | play | United Kingdom | ||
| Ransomware | Tangram Interiors View Details | thegentlemen | United States | ||
| Ransomware | Heritage Mechanical LLC View Details | dragonforce | United States | ||
| Ransomware | Pioneer Construction View Details | akira | Canada | ||
| Ransomware | Ferrovial View Details | AiLock | Spain | ||
| Ransomware | Arkın Group View Details | blacknevas | Türkiye | ||
| Ransomware | WBF Construction View Details | AiLock | Canada | ||
| Ransomware | Aldaco Avance 2022 S.L. View Details | Deadlock | Spain | ||
| Ransomware | foreconinc.com View Details | m3rx | United States | ||
| Ransomware | Eureka Construction INC View Details | titan | United States | ||
| Ransomware | Carolina Agri-Power View Details | qilin | United States | ||
| Ransomware | Aveiro Constructors Limited View Details | thegentlemen | Portugal | ||
| Ransomware | Welders Supply Equipment Rentals View Details | thegentlemen | United States | ||
| Ransomware | Vandalia Rental View Details | akira | United States | ||
| Ransomware | Navana Real Estate View Details | qilin | United Arab Emirates | ||
| Ransomware | Grupo Vanguardia View Details | Deadlock | Mexico | ||
| Ransomware | Grupolider | Grupo Actual View Details | Deadlock | Angola | ||
| Ransomware | SPACElogic View Details | qilin | Singapore | ||
| Ransomware | CRZ Construcciones View Details | qilin | Argentina | ||
| Ransomware | S.J. Louis View Details | qilin | Brazil | ||
| Ransomware | PCCC Realty LLC View Details | nightspire | United States | ||
| Ransomware | Lechner Massivhaus GmbH View Details | qilin | Austria | ||
| Ransomware | United Infrastructure View Details | play | United States | ||
| Ransomware | RISE Architecture View Details | akira | United States | ||
| Ransomware | Excalibur Rentals View Details | akira | — | ||
| Ransomware | bmiprojects.de View Details | safepay | Germany | ||
| Ransomware | knobel-bau.de View Details | safepay | Germany | ||
| Ransomware | lh-wohnverbund-wohnen-nrw.de View Details | safepay | Germany | ||
| Ransomware | Max Fordham View Details | qilin | United Kingdom | ||
| Ransomware | Francisco Imóveis View Details | Doommageddon | Brazil | ||
| Ransomware | Westgate View Details | genesis | United States | ||
| Ransomware | Locati Architects View Details | play | Australia | ||
| Ransomware | majuhome.com.my View Details | krybit | Malaysia | ||
| Ransomware | Dolrad View Details | medusalocker | United Arab Emirates | ||
| Ransomware | Keywest Projects View Details | thegentlemen | Canada | ||
| Ransomware | Rowley Properties View Details | thegentlemen | United Kingdom | ||
| Ransomware | Beran Concrete View Details | thegentlemen | Czechia | ||
| Ransomware | Dennis Waters Rental Properties View Details | qilin | United Kingdom | ||
| Ransomware | Western Construction View Details | play | United States | ||
| Ransomware | joyconstructionnyc.com View Details | settra | United States | ||
| Ransomware | ilex-paysages.com View Details | settra | France | ||
| Ransomware | Bonacio View Details | ransomhouse | Italy | ||
| Ransomware | Bristol Place View Details | qilin | United Kingdom | ||
| Ransomware | Gsma View Details | qilin | United Kingdom | ||
| Ransomware | conduril.pt View Details | settra | Portugal | ||
| Ransomware | roofdepot.com View Details | chaos | United States | ||
| Ransomware | JMS Southeast View Details | akira | United States | ||
| Ransomware | Schumacher Homes View Details | qilin | United States | ||
| Ransomware | NTP B.V. Civil Engineering Construction View Details | aurora | Netherlands | ||
| Ransomware | Nhà Thành Phố View Details | nova | Viet Nam | ||
| Ransomware | Preferred Properties View Details | payload | — | ||
| Ransomware | One Believing Interiors View Details | nova | — | ||
| Ransomware | Sparkle Pools View Details | qilin | United States | ||
| Ransomware | PJ Daly Contracting View Details | qilin | Ireland | ||
| Ransomware | KTR Real Estate Advisors View Details | anubis | United States | ||
| Ransomware | THL PROJECT MANAGEMENT SDN. BHD. View Details | qilin | Malaysia | ||
| Ransomware | Homes By J Anthony View Details | qilin | United States | ||
| Ransomware | Lawson Roofing View Details | rhysida | — | ||
| Ransomware | www.wolfconstruction.net View Details | lynx | United States | ||
| Ransomware | neuwoges.de View Details | incransom | Germany | ||
| Ransomware | harcourts.net View Details | safepay | Australia | ||
| Ransomware | He..t S..t. View Details | SilentRansomGroup | — | ||
| Ransomware | Insite Architects View Details | akira | — | ||
| Ransomware | hughstirling.co.uk View Details | safepay | Germany | ||
| Ransomware | tokyocivil.co.jp View Details | safepay | Japan | ||
| Ransomware | G**** R****l*e View Details | nightspire | — | ||
| Ransomware | Buechel Stone View Details | thegentlemen | United States | ||
| Ransomware | MHE9 Logística Ltda View Details | gunra | Brazil | ||
| Ransomware | Suárez&Clavera View Details | gunra | Uruguay | ||
| Ransomware | fasadeconsult.no View Details | m3rx | Norway | ||
| Ransomware | Hong Kong Parkview View Details | dragonforce | Hong Kong | ||
| Ransomware | lbreng.com.br View Details | lockbit5 | Brazil | ||
| Ransomware | jec.co.id View Details | lockbit5 | Indonesia | ||
| Ransomware | groupe-mbm.com View Details | lockbit5 | France | ||
| Ransomware | hgs-wt.at View Details | lockbit5 | Austria | ||
| Ransomware | grupodetoni.com.br View Details | lockbit5 | Brazil | ||
| Ransomware | Efficient Home View Details | qilin | United States | ||
| Ransomware | Metro Electric View Details | qilin | United States | ||
| Ransomware | Bayou Electrical Services View Details | pear | United States | ||
| Ransomware | Auburn Electrical Construction Company View Details | embargo | United States | ||
| Ransomware | SMPC Architects View Details | akira | — | ||
| Ransomware | Trevi View Details | nova | Italy | ||
| Ransomware | Metroply View Details | thegentlemen | — | ||
| Ransomware | *B* View Details | genesis | United States | ||
| Ransomware | D&M Contractors View Details | anubis | United Kingdom | ||
| Ransomware | CH Karnchang Public View Details | worldleaks | Thailand | ||
| Ransomware | Northern Ohio Regional Multiple Listing Service View Details | akira | United States | ||
| Ransomware | Anandji Haridas View Details | thegentlemen | India | ||
| Ransomware | Pyramid View Details | nitrogen | United States | ||
| Ransomware | Hightower Communications View Details | play | United States | ||
| Ransomware | Cavalier Flooring Systems Inc. View Details | genesis | United States | ||
| Ransomware | ecci-srl.com View Details | krybit | Italy | ||
| Ransomware | Shoreline Sightseeing View Details | dragonforce | United States | ||
| Ransomware | Interstate Roofing View Details | akira | United States | ||
| Ransomware | Shanpoornam Metals View Details | lamashtu | Malaysia | ||
| Ransomware | Maschinen-Stockert View Details | akira | Germany | ||
| Ransomware | Roofing Solutions View Details | qilin | United States | ||
| Ransomware | ksmart.ca View Details | dragonforce | Canada | ||
| Ransomware | jcripberger.com View Details | dragonforce | Germany |