Construction / Real Estate Ransomware Victims & Data Breaches
Breach House is tracking 1261 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1261Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 11 / 13
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Verhelst View Details | cactus | Belgium | ||
| Ransomware | McCray & Withrow View Details | medusa | United States | ||
| Ransomware | Ingeniería FULCRUM View Details | 8base | Spain | ||
| Ransomware | Trademark Property View Details | play | United States | ||
| Ransomware | Gnome Landscapes View Details | alphv | — | ||
| Ransomware | Putzel Electrical Contractors Inc View Details | noescape | United States | ||
| Ransomware | Mariposa Landscapes, Inc View Details | alphv | — | ||
| Ransomware | NeoDomos View Details | ciphbit | France | ||
| Ransomware | Bakrie Group & Bakrie Sumatera Plantations View Details | alphv | Indonesia | ||
| Ransomware | concretevalue.com View Details | lockbit3 | — | ||
| Ransomware | Weidmann & Associates View Details | medusa | United States | ||
| Ransomware | R N Wooler & Co Ltd View Details | noescape | United Kingdom | ||
| Ransomware | bildco.ae View Details | lockbit3 | United Arab Emirates | ||
| Ransomware | ageroute.sn View Details | lockbit3 | Senegal | ||
| Ransomware | mottamaholdings.com View Details | lockbit3 | Myanmar | ||
| Ransomware | WACOSA View Details | alphv | — | ||
| Ransomware | maniland.co.uk View Details | threeam | United Kingdom | ||
| Ransomware | CMC Group View Details | akira | — | ||
| Ransomware | INSTANT ACCESS View Details | noescape | Kuwait | ||
| Ransomware | JC Roman Construction View Details | 8base | — | ||
| Ransomware | Kobi Karp Architecture and Interior Design View Details | play | United States | ||
| Ransomware | kvc constructors inc View Details | alphv | — | ||
| Ransomware | U***** S*** S******* Inc View Details | bianlian | — | ||
| Ransomware | Seattle Housing Authority View Details | noescape | — | ||
| Ransomware | Neodata View Details | medusa | Spain | ||
| Ransomware | Instant Access Co View Details | noescape | — | ||
| Ransomware | Mid-America Real Estate Group View Details | alphv | — | ||
| Ransomware | Village Building Co. View Details | incransom | Australia | ||
| Ransomware | The Hurley Group View Details | cactus | — | ||
| Ransomware | Cornerstone Projects Group View Details | cactus | — | ||
| Ransomware | Gruskin Group View Details | akira | — | ||
| Ransomware | ckgroup.com.tw View Details | lockbit3 | Taiwan, Province of China | ||
| Ransomware | Network Pacific Real Estate - Leak View Details | ragnarlocker | — | ||
| Ransomware | ezpaybuildings.net View Details | lockbit3 | — | ||
| Ransomware | rexgroup.co.uk View Details | lockbit3 | United Kingdom | ||
| Ransomware | Jacobsen Construction View Details | incransom | — | ||
| Ransomware | CannonDesign View Details | dunghill | — | ||
| Ransomware | Orthum Bau View Details | cactus | — | ||
| Ransomware | P******* U********** View Details | bianlian | — | ||
| Ransomware | Hoosier Uplands Economic Development View Details | losttrust | India | ||
| Ransomware | SydganCorp View Details | losttrust | — | ||
| Ransomware | Key Construction View Details | losttrust | United States | ||
| Ransomware | Double V Construction View Details | losttrust | — | ||
| Ransomware | Unique Engineering is the most collaborative and dangerous construction company in Asia View Details | alphv | Thailand | ||
| Ransomware | Road Safety View Details | bianlian | — | ||
| Ransomware | DM Civil View Details | cactus | Australia | ||
| Ransomware | Bacon Universal View Details | cactus | — | ||
| Ransomware | Al Ashram Contracting View Details | alphv | — | ||
| Ransomware | Delta Group View Details | 8base | Australia | ||
| Ransomware | beamconstruction.com View Details | lockbit3 | — | ||
| Ransomware | pelicanwoodcliff.com View Details | lockbit3 | — | ||
| Ransomware | wdgroup.com.my View Details | threeam | Malaysia | ||
| Ransomware | clearwaterlandscape.com View Details | threeam | United States | ||
| Ransomware | Abbeyfield View Details | incransom | — | ||
| Ransomware | New Venture Escrow View Details | bianlian | — | ||
| Ransomware | kasida.bg View Details | ransomed | Bulgaria | ||
| Ransomware | sd69.org View Details | lockbit3 | — | ||
| Ransomware | Linktera View Details | ransomed | — | ||
| Ransomware | Omniatel View Details | noescape | Italy | ||
| Ransomware | gormanusa.com View Details | lockbit3 | — | ||
| Ransomware | Infinity Construction Company View Details | noescape | — | ||
| Ransomware | Seymours View Details | cactus | United Kingdom | ||
| Ransomware | Lagarde Meregnani View Details | cactus | France | ||
| Ransomware | Barry Plant Real Estate Australia View Details | alphv | Australia | ||
| Ransomware | Vivtok View Details | stormous | — | ||
| Ransomware | Pifer's Auction & Realty View Details | incransom | — | ||
| Ransomware | biso.at View Details | lockbit3 | Austria | ||
| Ransomware | guillerm-habitat.fr View Details | lockbit3 | France | ||
| Ransomware | casa-andina.com View Details | lockbit3 | Peru | ||
| Ransomware | SKYROOT View Details | 8base | India | ||
| Ransomware | Groupe Marchand Architecture & Design Inc View Details | alphv | Canada | ||
| Ransomware | GROUPHC View Details | blackbasta | Germany | ||
| Ransomware | leecorpinc.com View Details | lockbit3 | — | ||
| Ransomware | SBS Construction View Details | alphv | — | ||
| Ransomware | Grupo Garza Ponce was hacked! Due to a massive company vulnerability, more than 2 TB of se View Details | alphv | Mexico | ||
| Ransomware | Rossman Realty Group, inc. View Details | 8base | — | ||
| Ransomware | constructioncrd.com View Details | lockbit3 | — | ||
| Ransomware | Jacklett Construction LLC View Details | 8base | — | ||
| Ransomware | N** ******* ****** View Details | bianlian | — | ||
| Ransomware | Tri-Supply View Details | alphv | — | ||
| Ransomware | Artic Building Services View Details | alphv | — | ||
| Ransomware | LJ Hooker Palm Beach View Details | alphv | Australia | ||
| Ransomware | Cappagh Contractors Construction (London) Ltd View Details | alphv | United Kingdom | ||
| Ransomware | SUMITOMO BAKELITE USA View Details | alphv | Japan | ||
| Ransomware | FUTURE BUILDINGS WAS HACKED MORE THAN 150GB SENSETIVE DATA LEAKED View Details | alphv | Canada | ||
| Ransomware | thinkweltycom View Details | alphv | — | ||
| Ransomware | Welty Building Company View Details | alphv | — | ||
| Ransomware | Guardian Capital View Details | alphv | — | ||
| Ransomware | npauctionscom (copartcom) View Details | alphv | — | ||
| Ransomware | Collins Electrical View Details | alphv | — | ||
| Ransomware | Hull Property Group View Details | alphv | United States | ||
| Ransomware | KMC Savills View Details | alphv | — | ||
| Ransomware | Coteccons Group was hacked One of the most insecure construction companies in Asia has lea View Details | alphv | Viet Nam | ||
| Ransomware | Strait & Lamp Group View Details | alphv | — | ||
| Ransomware | EA SMITH View Details | alphv | Norway | ||
| Ransomware | FANSIPAN CONSTRUCTION CONSULTANTS CO.,LTD View Details | 8base | — | ||
| Ransomware | Bright Future Electric, LLC View Details | akira | United States | ||
| Ransomware | Alberto Couto Alves View Details | cactus | — | ||
| Ransomware | Americold View Details | cactus | United States | ||
| Ransomware | BTU View Details | 8base | Argentina |