Construction / Real Estate Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Construction / Real Estate organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 1326 organizations in the Construction / Real Estate sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1326Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Construction / Real Estate
Top countries for Construction / Real Estate attacks
Construction / Real Estate Victims Page 2 / 14
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Carolina Agri-Power View Details | qilin | United States | ||
| Ransomware | Aveiro Constructors Limited View Details | thegentlemen | Portugal | ||
| Ransomware | Welders Supply Equipment Rentals View Details | thegentlemen | United States | ||
| Ransomware | Vandalia Rental View Details | akira | United States | ||
| Ransomware | Navana Real Estate View Details | qilin | United Arab Emirates | ||
| Ransomware | Grupo Vanguardia View Details | Deadlock | Mexico | ||
| Ransomware | Grupolider | Grupo Actual View Details | Deadlock | Angola | ||
| Ransomware | SPACElogic View Details | qilin | Singapore | ||
| Ransomware | CRZ Construcciones View Details | qilin | Argentina | ||
| Ransomware | S.J. Louis View Details | qilin | Brazil | ||
| Ransomware | PCCC Realty LLC View Details | nightspire | United States | ||
| Ransomware | Lechner Massivhaus GmbH View Details | qilin | Austria | ||
| Ransomware | United Infrastructure View Details | play | United States | ||
| Ransomware | RISE Architecture View Details | akira | United States | ||
| Ransomware | Excalibur Rentals View Details | akira | — | ||
| Ransomware | bmiprojects.de View Details | safepay | Germany | ||
| Ransomware | knobel-bau.de View Details | safepay | Germany | ||
| Ransomware | lh-wohnverbund-wohnen-nrw.de View Details | safepay | Germany | ||
| Ransomware | Max Fordham View Details | qilin | United Kingdom | ||
| Ransomware | Francisco Imóveis View Details | Doommageddon | Brazil | ||
| Ransomware | Westgate View Details | genesis | United States | ||
| Ransomware | Locati Architects View Details | play | Australia | ||
| Ransomware | majuhome.com.my View Details | krybit | Malaysia | ||
| Ransomware | Dolrad View Details | medusalocker | United Arab Emirates | ||
| Ransomware | Keywest Projects View Details | thegentlemen | Canada | ||
| Ransomware | Rowley Properties View Details | thegentlemen | United Kingdom | ||
| Ransomware | Beran Concrete View Details | thegentlemen | Czechia | ||
| Ransomware | Dennis Waters Rental Properties View Details | qilin | United Kingdom | ||
| Ransomware | Western Construction View Details | play | United States | ||
| Ransomware | joyconstructionnyc.com View Details | settra | United States | ||
| Ransomware | ilex-paysages.com View Details | settra | France | ||
| Ransomware | Bonacio View Details | ransomhouse | Italy | ||
| Ransomware | Bristol Place View Details | qilin | United Kingdom | ||
| Ransomware | Gsma View Details | qilin | United Kingdom | ||
| Ransomware | conduril.pt View Details | settra | Portugal | ||
| Ransomware | roofdepot.com View Details | chaos | United States | ||
| Ransomware | JMS Southeast View Details | akira | United States | ||
| Ransomware | Schumacher Homes View Details | qilin | United States | ||
| Ransomware | NTP B.V. Civil Engineering Construction View Details | aurora | Netherlands | ||
| Ransomware | Nhà Thành Phố View Details | nova | Viet Nam | ||
| Ransomware | Preferred Properties View Details | payload | — | ||
| Ransomware | One Believing Interiors View Details | nova | — | ||
| Ransomware | Sparkle Pools View Details | qilin | United States | ||
| Ransomware | PJ Daly Contracting View Details | qilin | Ireland | ||
| Ransomware | KTR Real Estate Advisors View Details | anubis | United States | ||
| Ransomware | THL PROJECT MANAGEMENT SDN. BHD. View Details | qilin | Malaysia | ||
| Ransomware | Homes By J Anthony View Details | qilin | United States | ||
| Ransomware | Lawson Roofing View Details | rhysida | — | ||
| Ransomware | www.wolfconstruction.net View Details | lynx | United States | ||
| Ransomware | neuwoges.de View Details | incransom | Germany | ||
| Ransomware | harcourts.net View Details | safepay | Australia | ||
| Ransomware | He..t S..t. View Details | SilentRansomGroup | — | ||
| Ransomware | Insite Architects View Details | akira | — | ||
| Ransomware | hughstirling.co.uk View Details | safepay | Germany | ||
| Ransomware | tokyocivil.co.jp View Details | safepay | Japan | ||
| Ransomware | G**** R****l*e View Details | nightspire | — | ||
| Ransomware | Buechel Stone View Details | thegentlemen | United States | ||
| Ransomware | MHE9 Logística Ltda View Details | gunra | Brazil | ||
| Ransomware | Suárez&Clavera View Details | gunra | Uruguay | ||
| Ransomware | fasadeconsult.no View Details | m3rx | Norway | ||
| Ransomware | Hong Kong Parkview View Details | dragonforce | Hong Kong | ||
| Ransomware | lbreng.com.br View Details | lockbit5 | Brazil | ||
| Ransomware | jec.co.id View Details | lockbit5 | Indonesia | ||
| Ransomware | groupe-mbm.com View Details | lockbit5 | France | ||
| Ransomware | hgs-wt.at View Details | lockbit5 | Austria | ||
| Ransomware | grupodetoni.com.br View Details | lockbit5 | Brazil | ||
| Ransomware | Efficient Home View Details | qilin | United States | ||
| Ransomware | Metro Electric View Details | qilin | United States | ||
| Ransomware | Bayou Electrical Services View Details | pear | United States | ||
| Ransomware | Auburn Electrical Construction Company View Details | embargo | United States | ||
| Ransomware | SMPC Architects View Details | akira | — | ||
| Ransomware | Trevi View Details | nova | Italy | ||
| Ransomware | Metroply View Details | thegentlemen | — | ||
| Ransomware | *B* View Details | genesis | United States | ||
| Ransomware | D&M Contractors View Details | anubis | United Kingdom | ||
| Ransomware | CH Karnchang Public View Details | worldleaks | Thailand | ||
| Ransomware | Northern Ohio Regional Multiple Listing Service View Details | akira | United States | ||
| Ransomware | Anandji Haridas View Details | thegentlemen | India | ||
| Ransomware | Pyramid View Details | nitrogen | United States | ||
| Ransomware | Hightower Communications View Details | play | United States | ||
| Ransomware | Cavalier Flooring Systems Inc. View Details | genesis | United States | ||
| Ransomware | ecci-srl.com View Details | krybit | Italy | ||
| Ransomware | Shoreline Sightseeing View Details | dragonforce | United States | ||
| Ransomware | Interstate Roofing View Details | akira | United States | ||
| Ransomware | Shanpoornam Metals View Details | lamashtu | Malaysia | ||
| Ransomware | Maschinen-Stockert View Details | akira | Germany | ||
| Ransomware | Roofing Solutions View Details | qilin | United States | ||
| Ransomware | ksmart.ca View Details | dragonforce | Canada | ||
| Ransomware | jcripberger.com View Details | dragonforce | Germany | ||
| Ransomware | nemd.com View Details | dragonforce | Niger | ||
| Ransomware | Northwest Woodworks View Details | akira | — | ||
| Ransomware | Greenway Technologies View Details | dragonforce | Germany | ||
| Ransomware | arsenalscaffold.com View Details | dragonforce | United Kingdom | ||
| Ransomware | Hoy Construction View Details | nova | United States | ||
| Ransomware | Function Enterprises View Details | akira | — | ||
| Ransomware | Grupo Pasquel View Details | thegentlemen | Ecuador | ||
| Ransomware | CJ Architects View Details | qilin | United States | ||
| Ransomware | Acton Electrical View Details | akira | United Kingdom | ||
| Ransomware | Kabushiki Gaisha Hodozuka Setsubi View Details | payload | Japan | ||
| Ransomware | DEVO-Tech View Details | thegentlemen | Switzerland |