Construction / Real Estate Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Construction / Real Estate organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 1326 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1326Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 11 / 14
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | stockdevelopment.com View Details | lockbit3 | United States | ||
| Ransomware | Stack Infrastructure View Details | play | United States | ||
| Ransomware | FBi Construction View Details | play | United States | ||
| Ransomware | Gilmore Construction View Details | blacksuit | United States | ||
| Ransomware | Kumagai Gumi Group View Details | alphv | Japan | ||
| Ransomware | Faison View Details | dragonforce | United States | ||
| Ransomware | easternshipbuilding.com View Details | lockbit3 | Panama | ||
| Ransomware | Bangladesh Police View Details | mogilevich | Bangladesh | ||
| Ransomware | WEL Partners View Details | incransom | Canada | ||
| Ransomware | dunaway.com View Details | lockbit3 | United States | ||
| Ransomware | crbgroup.com View Details | lockbit3 | United States | ||
| Ransomware | kinematica.ch View Details | qilin | Switzerland | ||
| Ransomware | Acorn View Details | medusa | United Kingdom | ||
| Ransomware | Desarrollo De Tecnologia y Sistemas Ltda View Details | akira | Chile | ||
| Ransomware | Marchassociates View Details | bianlian | United States | ||
| Ransomware | doneff.com View Details | threeam | United States | ||
| Ransomware | The Chas. E. Phipps View Details | medusa | United States | ||
| Ransomware | theclosingagent.com View Details | lockbit3 | United States | ||
| Ransomware | UNIFER View Details | 8base | France | ||
| Ransomware | rajawali.com View Details | lockbit3 | Indonesia | ||
| Ransomware | ROOSENS BÉTONS View Details | qilin | Belgium | ||
| Ransomware | alfiras.com View Details | lockbit3 | United Arab Emirates | ||
| Ransomware | grupomoraval.com View Details | lockbit3 | Spain | ||
| Ransomware | bsaarchitects.com View Details | lockbit3 | United States | ||
| Ransomware | Western Municipal Construction View Details | blacksuit | United States | ||
| Ransomware | Mason Construction View Details | play | United States | ||
| Ransomware | Perry-McCall Construction View Details | play | United States | ||
| Ransomware | ksa-architecture.com View Details | lockbit3 | United States | ||
| Ransomware | DOD contractors you are welcome in our chat. View Details | donutleaks | United States | ||
| Ransomware | manitou-group.com View Details | lockbit3 | France | ||
| Ransomware | gatesshields.com View Details | lockbit3 | United States | ||
| Ransomware | Daher Contracting View Details | trigona | United States | ||
| Ransomware | Nbbl View Details | 8base | Norway | ||
| Ransomware | Meag Va-system AB View Details | 8base | Sweden | ||
| Ransomware | Séquano View Details | 8base | France | ||
| Ransomware | mordfin View Details | qilin | United States | ||
| Ransomware | Shoma group View Details | bianlian | United States | ||
| Ransomware | https://www.mikeferry.com View Details | alphalocker | United States | ||
| Ransomware | marxan.es View Details | lockbit3 | Spain | ||
| Ransomware | home-waremmien.be View Details | lockbit3 | Belgium | ||
| Ransomware | TPG Architecture View Details | play | United States | ||
| Ransomware | GROWTH by NCRC View Details | bianlian | United States | ||
| Ransomware | Triella View Details | alphv | Canada | ||
| Ransomware | Northland Mechanical Contractors View Details | bianlian | — | ||
| Ransomware | hoffmanestates.org View Details | lockbit3 | — | ||
| Ransomware | hunterbuildings.com View Details | cactus | — | ||
| Ransomware | WELBRO Building Corporation View Details | 8base | — | ||
| Ransomware | LAJOLLAGROUP View Details | cactus | United States | ||
| Ransomware | Electrical Connections View Details | bianlian | — | ||
| Ransomware | NNDOMAIN View Details | cactus | United States | ||
| Ransomware | Lunacon Construction Group View Details | dragonforce | — | ||
| Ransomware | Tglt View Details | dragonforce | — | ||
| Ransomware | Advantage Group International View Details | alphv | — | ||
| Ransomware | SBK Real Estate View Details | 8base | — | ||
| Ransomware | Tim Davies Landscaping View Details | 8base | Australia | ||
| Ransomware | greenbriersportingclub.com View Details | lockbit3 | — | ||
| Ransomware | SML Group View Details | bianlian | — | ||
| Ransomware | National Nail Corp View Details | cactus | — | ||
| Ransomware | Getrix View Details | akira | Italy | ||
| Ransomware | Centroedile Milano View Details | blacksuit | — | ||
| Ransomware | First Housing Development View Details | hunters | United States | ||
| Ransomware | Axiom Construction & Consulting View Details | cactus | — | ||
| Ransomware | B+P Gerüstbau GmbH View Details | incransom | Germany | ||
| Ransomware | DM Civil Construction Co View Details | incransom | Australia | ||
| Ransomware | Imperiali AG View Details | 8base | Switzerland | ||
| Ransomware | [DATA] Bakrie Group & Bakrie Sumatera Plantations View Details | alphv | Indonesia | ||
| Ransomware | Verhelst View Details | cactus | Belgium | ||
| Ransomware | McCray & Withrow View Details | medusa | United States | ||
| Ransomware | Ingeniería FULCRUM View Details | 8base | Spain | ||
| Ransomware | Trademark Property View Details | play | United States | ||
| Ransomware | Gnome Landscapes View Details | alphv | — | ||
| Ransomware | Putzel Electrical Contractors Inc View Details | noescape | United States | ||
| Ransomware | Mariposa Landscapes, Inc View Details | alphv | — | ||
| Ransomware | NeoDomos View Details | ciphbit | France | ||
| Ransomware | Bakrie Group & Bakrie Sumatera Plantations View Details | alphv | Indonesia | ||
| Ransomware | concretevalue.com View Details | lockbit3 | — | ||
| Ransomware | Weidmann & Associates View Details | medusa | United States | ||
| Ransomware | R N Wooler & Co Ltd View Details | noescape | United Kingdom | ||
| Ransomware | bildco.ae View Details | lockbit3 | United Arab Emirates | ||
| Ransomware | ageroute.sn View Details | lockbit3 | Senegal | ||
| Ransomware | mottamaholdings.com View Details | lockbit3 | Myanmar | ||
| Ransomware | WACOSA View Details | alphv | — | ||
| Ransomware | maniland.co.uk View Details | threeam | United Kingdom | ||
| Ransomware | CMC Group View Details | akira | — | ||
| Ransomware | INSTANT ACCESS View Details | noescape | Kuwait | ||
| Ransomware | JC Roman Construction View Details | 8base | — | ||
| Ransomware | Kobi Karp Architecture and Interior Design View Details | play | United States | ||
| Ransomware | kvc constructors inc View Details | alphv | — | ||
| Ransomware | U***** S*** S******* Inc View Details | bianlian | — | ||
| Ransomware | Seattle Housing Authority View Details | noescape | — | ||
| Ransomware | Neodata View Details | medusa | Spain | ||
| Ransomware | Instant Access Co View Details | noescape | — | ||
| Ransomware | Mid-America Real Estate Group View Details | alphv | — | ||
| Ransomware | Village Building Co. View Details | incransom | Australia | ||
| Ransomware | The Hurley Group View Details | cactus | — | ||
| Ransomware | Cornerstone Projects Group View Details | cactus | — | ||
| Ransomware | Gruskin Group View Details | akira | — | ||
| Ransomware | ckgroup.com.tw View Details | lockbit3 | Taiwan, Province of China | ||
| Ransomware | Network Pacific Real Estate - Leak View Details | ragnarlocker | — | ||
| Ransomware | ezpaybuildings.net View Details | lockbit3 | — |