Skip to content
Leak-site post naming Design-Aire Engineering, INC, captured by ThreatCluster

Design-Aire Engineering, INC

dark project

Ransomware leak-site victim intelligence

Data size
375 GB Data Analyzed
Files
229,979
Views
9,870
Posted
Aug 24, 2026
Country
United States
Industry
Engineering services (mechanical, electrical, plumbing, energy)

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The group states that approximately 1 TB of data was leaked from the company's network in a cyberattack, comprising 116,438 files including personal and financial information. The leak post is published, and the victim is identified on the page as Ruhrpumpen (domain www.ruhrpumpen.com), a Mexican manufacturing company with reported revenue of $350 million. ThreatCluster’s capture confirms these are the group’s claims and that the incident involved personal and financial information.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings.

Data categories
employees' personal datadetailed architectural plans of clients' buildings

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX_ID
243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Data Leak URL
http://d2jvzzetpzpfpmlmhzvq2njf2vwjvlwvrfg4cc7yus4hkiqdb5goh3id.onion

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a bank reconciliation statement detailing transactions for a RBC CAD bank account, including deposits, withdrawals, and ending balance.
onion leak page355 KB

Negotiation

Open
Tox 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Onion http://d2jvzzetpzpfpmlmhzvq2njf2vwjvlwvrfg4cc7yus4hkiqdb5goh3id.onion