Skip to content
Leak-site post naming Ferrovial, captured by ThreatCluster

Ferrovial

ailock

Ransomware leak-site victim intelligence

Data size
205Gb uncompressed data
Posted
Jul 26, 2026
Country
ES
Industry
Infrastructure operator

Summary

Written by ThreatClusterfrom victim profile, leak post

ailock claims to have exfiltrated 205GB of uncompressed data from Ferrovial (ferrovial.com). The post, published on 2026-07-26, identifies Ferrovial as the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Ferrovial

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring a stylized skull with circuit-like designs, accompanied by the text "AiLock" below it.
onion leak page129 KB
Logo featuring the letters "IA" in white on a blue background, with a yellow swoosh element.
onion leak page138 KB
The image features a stylized skull with a circuit-like design, surrounded by a glowing pattern, accompanied by the text "AiLock" below it.
onion leak page126 KB
onion leak page8.5 KB
Logo featuring a stylized house design with the text "HOMESITE SERVICES" and the tagline "The Residential Services Company."
onion leak page14 KB
onion leak page88 KB
onion leak page74 KB
onion leak page24 KB
onion leak page
onion leak page3.5 KB