Skip to content
Leak-site post naming AECOM, captured by ThreatCluster

AECOM

metaencryptor

Ransomware leak-site victim intelligence

Data size
1.2 TB
Posted
Sep 17, 2026
Countdown
7d Deadline
Country
United States
Industry
Infrastructure consulting and engineering

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot, our reporting

METAENCRYPTOR claims to have exfiltrated 1.22 TB of data from AECOM and lists it on its leak site. The post is published as listed and shows a 28-day countdown to the stated deadline. The leak post describes AECOM as a US-based global infrastructure consulting and engineering company.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0

What was taken

AECOM is a leading U.S.-based global infrastructure consulting and engineering company. It provides design, engineering, construction management, and advisory services for major infrastructure projects across transportation, water, energy, buildings, environmental services, and government markets. AECOM operates worldwide and serves public- and private-sector clients.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture