Construction / Real Estate Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Construction / Real Estate organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 1326 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1326Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 1 / 14
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Winston Contracting, LLC View Details | qilin | United States | ||
| Ransomware | Gilco Scaffolding View Details | qilin | United Kingdom | ||
| Ransomware | Frisby Roofing (Frisby Construction LLC) View Details | medusalocker | United States | ||
| Ransomware | jms building corporation View Details | incransom | United States | ||
| Ransomware | Eagle Construction View Details | akira | — | ||
| Ransomware | Ben Leeds Properties WARNING View Details | ShadowByt3$ | United Kingdom | ||
| Ransomware | Ben Leeds Properties View Details | ShadowByt3$ | United Kingdom | ||
| Ransomware | Petrocare Construction View Details | Storm | Canada | ||
| Ransomware | BYK Construction View Details | akira | United States | ||
| Ransomware | hccd-construction.com View Details | krybit | United States | ||
| Ransomware | rsk-immobilien.de View Details | ZaWoo | Germany | ||
| Ransomware | ITC Properties Group Limited View Details | Orova | Hong Kong | ||
| Ransomware | Zion Construction View Details | thegentlemen | United States | ||
| Ransomware | Central Florida Civil LLC View Details | Orova | United States | ||
| Ransomware | Aurore Development S.p.A. View Details | qilin | Italy | ||
| Ransomware | Desatera Sdn Bhd View Details | qilin | Malaysia | ||
| Ransomware | ASCII Group View Details | qilin | Japan | ||
| Ransomware | Lepi Enterprises View Details | securotrop | United States | ||
| Ransomware | Turner and Townsend View Details | coinbasecartel | United Kingdom | ||
| Ransomware | Lercher Werkzeugbau View Details | qilin | Austria | ||
| Ransomware | https://pacific-construction.com/ View Details | incransom | United Kingdom | ||
| Ransomware | Stücheli Architekten View Details | payload | Switzerland | ||
| Ransomware | www.kilpi-koskinen.fi View Details | krybit | Finland | ||
| Ransomware | tommer construction View Details | qilin | United States | ||
| Ransomware | Cook Remodeling View Details | Global Secret Group | United States | ||
| Ransomware | RAK Construction View Details | thegentlemen | India | ||
| Ransomware | Zion Contracting View Details | thegentlemen | United States | ||
| Ransomware | Constellation HomeBuilder Systems View Details | unsafe | United States | ||
| Ransomware | Clausing View Details | qilin | Germany | ||
| Ransomware | Alya Construtora View Details | ransomhouse | Brazil | ||
| Ransomware | Highwoods Properties View Details | Helix | United States | ||
| Ransomware | Morguard View Details | Helix | United States | ||
| Ransomware | www.serengetiestates.co.za View Details | krybit | South Africa | ||
| Ransomware | ALIZE (alize-sud.fr) View Details | qilin | France | ||
| Ransomware | Hilliard's Air Conditioning & Heating Inc View Details | Orova | United States | ||
| Ransomware | Hope's Windows View Details | cry0 | United States | ||
| Ransomware | Stoneybrook West Master Association, Inc View Details | Orova | United States | ||
| Ransomware | Stonecrest POA View Details | Orova | United States | ||
| Ransomware | David King Architect View Details | Orova | United States | ||
| Ransomware | Woodside Ranch View Details | Orova | United States | ||
| Ransomware | ecc******* View Details | clop | United Kingdom | ||
| Ransomware | Mike Graham Heating And Air Conditioning View Details | dragonforce | United States | ||
| Ransomware | AKM Enterprises INC View Details | everest | United States | ||
| Ransomware | The Miller Group View Details | Dark Project | United Kingdom | ||
| Ransomware | Reid Electric Service, Inc View Details | Dark Project | United States | ||
| Ransomware | Galvin Brothers View Details | qilin | Ireland | ||
| Ransomware | Northeastern Communications & Electrical View Details | Orova | United States | ||
| Ransomware | WD Masonry & Concrete View Details | qilin | United States | ||
| Ransomware | Yost Home Improvements View Details | Orova | United States | ||
| Ransomware | Conceptual Designs, Inc. View Details | Orova | United States | ||
| Ransomware | US Installation Group, Inc. View Details | aurora | United States | ||
| Ransomware | lccgroup.com View Details | incransom | Philippines | ||
| Ransomware | hanan-hov.co.il View Details | safepay | Israel | ||
| Ransomware | PCL Holding View Details | ransomhouse | Canada | ||
| Ransomware | Albers Mechanical Contractors View Details | akira | United States | ||
| Ransomware | pcclimitedindia.com View Details | lockbit5 | India | ||
| Ransomware | Asset Flooring Group Australia View Details | qilin | Australia | ||
| Ransomware | Ceragres View Details | qilin | Canada | ||
| Ransomware | Pointe Property Group View Details | qilin | United States | ||
| Ransomware | Schreiner Trockenbau GmbH View Details | qilin | Austria | ||
| Ransomware | M. B. Kahn Construction Co. View Details | coinbasecartel | United States | ||
| Ransomware | Acosta Sons View Details | thegentlemen | United States | ||
| Ransomware | Hutch Paving View Details | thegentlemen | United States | ||
| Ransomware | Precision Concrete Pumping View Details | thegentlemen | United States | ||
| Ransomware | C.A. Walker Construction View Details | genesis | United States | ||
| Ransomware | RE/MAX 1st Choice View Details | Gammax | Canada | ||
| Ransomware | Indian Motos Inmot View Details | qilin | Ecuador | ||
| Ransomware | Della Casa Group AG View Details | incransom | Switzerland | ||
| Ransomware | KSL Dirtworks LLC View Details | nightspire | United States | ||
| Ransomware | Savills France View Details | qilin | France | ||
| Ransomware | Westlake Realty Group, Inc. View Details | genesis | United States | ||
| Ransomware | Chappell Supply & Equipment View Details | Global Secret Group | United States | ||
| Ransomware | Bonava View Details | ExfilSquad | Sweden | ||
| Ransomware | ausproof.com.au View Details | m3rx | Australia | ||
| Ransomware | Metropolitan Construction Systems View Details | pear | United States | ||
| Ransomware | Thialf View Details | thegentlemen | Netherlands | ||
| Ransomware | HBS Group View Details | thegentlemen | Australia | ||
| Ransomware | Affinity Designs View Details | thegentlemen | United States | ||
| Ransomware | Sunway Berhad View Details | qilin | Malaysia | ||
| Ransomware | P & A Construction View Details | qilin | United States | ||
| Ransomware | Cpcg View Details | qilin | Brazil | ||
| Ransomware | Kruse Construction View Details | akira | United States | ||
| Ransomware | University Sprinkler Systems View Details | akira | Canada | ||
| Ransomware | Pelli Clarke Pelli Architects View Details | Booba Project | United States | ||
| Ransomware | mende-grundbesitz.de View Details | safepay | Germany | ||
| Ransomware | Bath Fitter View Details | anubis | United States | ||
| Ransomware | Colliers Real Estate View Details | coinbasecartel | United States | ||
| Ransomware | Associated Theatrical Contractors View Details | qilin | United States | ||
| Ransomware | CKR Consulting Engineers View Details | payload | South Africa | ||
| Ransomware | Powder River Heating & Air Conditioning View Details | qilin | United States | ||
| Ransomware | Wring Group View Details | play | United Kingdom | ||
| Ransomware | Tangram Interiors View Details | thegentlemen | United States | ||
| Ransomware | Heritage Mechanical LLC View Details | dragonforce | United States | ||
| Ransomware | Pioneer Construction View Details | akira | Canada | ||
| Ransomware | Ferrovial View Details | AiLock | Spain | ||
| Ransomware | Arkın Group View Details | blacknevas | Türkiye | ||
| Ransomware | WBF Construction View Details | AiLock | Canada | ||
| Ransomware | Aldaco Avance 2022 S.L. View Details | Deadlock | Spain | ||
| Ransomware | foreconinc.com View Details | m3rx | United States | ||
| Ransomware | Eureka Construction INC View Details | titan | United States |