Skip to content
[METAENCRYPTOR] Ransomware Attacks Target AECOM, Beckman Coulter, and Promantra

[METAENCRYPTOR] Ransomware Attacks Target AECOM, Beckman Coulter, and Promantra

First seen 17 Sep 2026, 16:30 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 17, 2026 at 18:24 UTC
  • Three U.S. companies listed as ransomware victims on the same day.
  • No specific details on data encryption or ransom demands provided.
  • Claims remain unverified and should be treated with caution.

On September 17, 2026, three U.S.-based companies—AECOM, Beckman Coulter, Inc., and Promantra, Inc.—were listed as victims on the METAENCRYPTOR ransomware group's leak site. AECOM is involved in infrastructure consulting and engineering, while Beckman Coulter specializes in medical diagnostics, and Promantra provides healthcare technology services. The listings do not specify the nature of the attacks, whether data was encrypted or stolen, or any ransom demands. No details regarding the volume of compromised data or specific categories of information were disclosed. The lack of corroborating evidence means these claims should be treated as unverified until confirmed by independent sources. The incident highlights ongoing threats to organizations in critical sectors, particularly healthcare and engineering.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-17
AECOM listed as ransomware victim
AECOM was identified on the METAENCRYPTOR leak site, with no details on the attack's nature or data involved.
Redpacketsecurity
2026-09-17
Beckman Coulter, Inc. listed as victim
Beckman Coulter, a medical diagnostics firm, was also listed without details on data theft or ransom.
Redpacketsecurity
2026-09-17
Promantra, Inc. listed as victim
Promantra, a healthcare technology provider, was listed as a victim with no specifics on the incident provided.
Redpacketsecurity

More articles in this cluster (5)

Following this threat?

Track MetaEncryptor and Aecom in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed