Northcroft
coinbasecartelThis record tracks a ransomware attack claimed by the coinbasecartel group against Northcroft. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
[AI generated] Northcroft is a global construction consultancy firm that delivers project management and cost management services for buildings, infrastructure, and the environment. Founded in 1840, the company is headquartered in London, UK. It serves clients in a variety of sectors, including healthcare, transportation, education, commercial, and leisure. Its services include cost consulting, project management, and business consulting.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.