Leak-site post naming AUM Construction, captured by ThreatCluster
Back to victims

AUM Construction

qilin

Ransomware leak-site victim intelligence · EN

Files
427
Views
108
Posted
Aug 29, 2026
Country
US
Industry
Electricity, Oil & Gas

Summary

Written by ThreatCluster from site fields, victim profile, leak post, screenshot

Qilin claims to have stolen 427 files from AUM Construction (legal name AUM Construction; domain auminc.us), as stated on the group’s leak page. The leak post is listed on the group's leak site. The victim profile on the leak page identifies AUM Construction and places its sector in Electricity, Oil & Gas.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.auminc.us

What was taken

Blog AUM Construction

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "AUM CONSTRUCTION, INC." on a dark background, accompanied by three colored circles (red, yellow, green) on the right.
onion leak page 16 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion