Skip to content
Leak-site post naming Engineers Contractors Fabricators Inc. (ECF), captured by ThreatCluster

Engineers Contractors Fabricators Inc. (ECF)

interlock

Ransomware leak-site victim intelligence

Data size
430 GB
Posted
Oct 12, 2026
Country
US
Industry
piping and insulation contractor

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The interlock group claims it has leaked 430 GB of data from Engineers Contractors Fabricators Inc. (ECF), a piping and insulation contractor. The leak description states access to confidential information including proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets. The leak post states the publication status as listed. Victim domain ecfinc.net is cited in the leak post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture