Construction / Real Estate Ransomware Victims & Data Breaches
Dark Eye is tracking 1264 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1264Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 1 / 13
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Acosta Sons View Details | thegentlemen | United States | ||
| Ransomware | Hutch Paving View Details | thegentlemen | United States | ||
| Ransomware | Precision Concrete Pumping View Details | thegentlemen | United States | ||
| Ransomware | C.A. Walker Construction View Details | genesis | United States | ||
| Ransomware | RE/MAX 1st Choice View Details | Gammax | Canada | ||
| Ransomware | Indian Motos Inmot View Details | qilin | Ecuador | ||
| Ransomware | Della Casa Group AG View Details | incransom | Switzerland | ||
| Ransomware | KSL Dirtworks LLC View Details | nightspire | United States | ||
| Ransomware | Savills France View Details | qilin | France | ||
| Ransomware | Westlake Realty Group, Inc. View Details | genesis | United States | ||
| Ransomware | Chappell Supply & Equipment View Details | Global Secret Group | United States | ||
| Ransomware | Bonava View Details | ExfilSquad | Sweden | ||
| Ransomware | ausproof.com.au View Details | m3rx | Australia | ||
| Ransomware | Metropolitan Construction Systems View Details | pear | United States | ||
| Ransomware | Thialf View Details | thegentlemen | Netherlands | ||
| Ransomware | HBS Group View Details | thegentlemen | Australia | ||
| Ransomware | Affinity Designs View Details | thegentlemen | United States | ||
| Ransomware | Sunway Berhad View Details | qilin | Malaysia | ||
| Ransomware | P & A Construction View Details | qilin | United States | ||
| Ransomware | Cpcg View Details | qilin | Brazil | ||
| Ransomware | Kruse Construction View Details | akira | United States | ||
| Ransomware | University Sprinkler Systems View Details | akira | Canada | ||
| Ransomware | Pelli Clarke Pelli Architects View Details | Booba Project | United States | ||
| Ransomware | mende-grundbesitz.de View Details | safepay | Germany | ||
| Ransomware | Bath Fitter View Details | anubis | United States | ||
| Ransomware | Colliers Real Estate View Details | coinbasecartel | United States | ||
| Ransomware | Associated Theatrical Contractors View Details | qilin | United States | ||
| Ransomware | CKR Consulting Engineers View Details | payload | South Africa | ||
| Ransomware | Powder River Heating & Air Conditioning View Details | qilin | United States | ||
| Ransomware | Wring Group View Details | play | United Kingdom | ||
| Ransomware | Tangram Interiors View Details | thegentlemen | United States | ||
| Ransomware | Heritage Mechanical LLC View Details | dragonforce | United States | ||
| Ransomware | Pioneer Construction View Details | akira | Canada | ||
| Ransomware | Ferrovial View Details | AiLock | Spain | ||
| Ransomware | Arkın Group View Details | blacknevas | Türkiye | ||
| Ransomware | WBF Construction View Details | AiLock | Canada | ||
| Ransomware | Aldaco Avance 2022 S.L. View Details | Deadlock | Spain | ||
| Ransomware | foreconinc.com View Details | m3rx | United States | ||
| Ransomware | Eureka Construction INC View Details | titan | United States | ||
| Ransomware | Carolina Agri-Power View Details | qilin | United States | ||
| Ransomware | Aveiro Constructors Limited View Details | thegentlemen | Portugal | ||
| Ransomware | Welders Supply Equipment Rentals View Details | thegentlemen | United States | ||
| Ransomware | Vandalia Rental View Details | akira | United States | ||
| Ransomware | Navana Real Estate View Details | qilin | United Arab Emirates | ||
| Ransomware | Grupo Vanguardia View Details | Deadlock | Mexico | ||
| Ransomware | Grupolider | Grupo Actual View Details | Deadlock | Angola | ||
| Ransomware | SPACElogic View Details | qilin | Singapore | ||
| Ransomware | CRZ Construcciones View Details | qilin | Argentina | ||
| Ransomware | S.J. Louis View Details | qilin | Brazil | ||
| Ransomware | PCCC Realty LLC View Details | nightspire | United States | ||
| Ransomware | Lechner Massivhaus GmbH View Details | qilin | Austria | ||
| Ransomware | United Infrastructure View Details | play | United States | ||
| Ransomware | RISE Architecture View Details | akira | United States | ||
| Ransomware | Excalibur Rentals View Details | akira | — | ||
| Ransomware | bmiprojects.de View Details | safepay | Germany | ||
| Ransomware | knobel-bau.de View Details | safepay | Germany | ||
| Ransomware | lh-wohnverbund-wohnen-nrw.de View Details | safepay | Germany | ||
| Ransomware | Max Fordham View Details | qilin | United Kingdom | ||
| Ransomware | Francisco Imóveis View Details | Doommageddon | Brazil | ||
| Ransomware | Westgate View Details | genesis | United States | ||
| Ransomware | Locati Architects View Details | play | Australia | ||
| Ransomware | majuhome.com.my View Details | krybit | Malaysia | ||
| Ransomware | Dolrad View Details | medusalocker | United Arab Emirates | ||
| Ransomware | Keywest Projects View Details | thegentlemen | Canada | ||
| Ransomware | Rowley Properties View Details | thegentlemen | United Kingdom | ||
| Ransomware | Beran Concrete View Details | thegentlemen | Czechia | ||
| Ransomware | Dennis Waters Rental Properties View Details | qilin | United Kingdom | ||
| Ransomware | Western Construction View Details | play | United States | ||
| Ransomware | joyconstructionnyc.com View Details | settra | United States | ||
| Ransomware | ilex-paysages.com View Details | settra | France | ||
| Ransomware | Bonacio View Details | ransomhouse | Italy | ||
| Ransomware | Bristol Place View Details | qilin | United Kingdom | ||
| Ransomware | Gsma View Details | qilin | United Kingdom | ||
| Ransomware | conduril.pt View Details | settra | Portugal | ||
| Ransomware | roofdepot.com View Details | chaos | United States | ||
| Ransomware | JMS Southeast View Details | akira | United States | ||
| Ransomware | Schumacher Homes View Details | qilin | United States | ||
| Ransomware | NTP B.V. Civil Engineering Construction View Details | aurora | Netherlands | ||
| Ransomware | Nhà Thành Phố View Details | nova | Viet Nam | ||
| Ransomware | Preferred Properties View Details | payload | — | ||
| Ransomware | One Believing Interiors View Details | nova | — | ||
| Ransomware | Sparkle Pools View Details | qilin | United States | ||
| Ransomware | PJ Daly Contracting View Details | qilin | Ireland | ||
| Ransomware | KTR Real Estate Advisors View Details | anubis | United States | ||
| Ransomware | THL PROJECT MANAGEMENT SDN. BHD. View Details | qilin | Malaysia | ||
| Ransomware | Homes By J Anthony View Details | qilin | United States | ||
| Ransomware | Lawson Roofing View Details | rhysida | — | ||
| Ransomware | www.wolfconstruction.net View Details | lynx | United States | ||
| Ransomware | neuwoges.de View Details | incransom | Germany | ||
| Ransomware | harcourts.net View Details | safepay | Australia | ||
| Ransomware | He..t S..t. View Details | SilentRansomGroup | — | ||
| Ransomware | Insite Architects View Details | akira | — | ||
| Ransomware | hughstirling.co.uk View Details | safepay | Germany | ||
| Ransomware | tokyocivil.co.jp View Details | safepay | Japan | ||
| Ransomware | G**** R****l*e View Details | nightspire | — | ||
| Ransomware | Buechel Stone View Details | thegentlemen | United States | ||
| Ransomware | MHE9 Logística Ltda View Details | gunra | Brazil | ||
| Ransomware | Suárez&Clavera View Details | gunra | Uruguay | ||
| Ransomware | fasadeconsult.no View Details | m3rx | Norway | ||
| Ransomware | Hong Kong Parkview View Details | dragonforce | Hong Kong |