Data size
approximately 661 GB exfiltrated
Views
212
Posted
Nov 9, 2026
Country
United States
Industry
Other
Victim profile
- Headquarters
- 5005 Riverway Drive, Suite 500 Houston, TX 77056
Houston, Texas, United States - Employees
- 109
- Founded
- 1975
- Domains
- https://www.johnsondevelopment.com/
- People named
- [object Object] [object Object] [object Object] [object Object] [object Object] [object Object] [object Object]
What was taken
Houston, Texas-based privately held master-planned residential community developer with 25+ active communities in Texas and a Georgia subsidiary.
Data categories
HR dataFinancial dataDevelopment assetsPayroll recordsemployee dataCorporate governancesensitive personal data
Leak site tags
Cross Creek RanchGrand Central ParkSiennaTrinity FallsWoodforestImperialJordan RanchViridianBrysonLake ArrowheadTJC LP
File types seen
bat × 1rdp × 1rtf × 1txt × 2xlsx × 1
Sample files (6)
MAP-SCRIPT.txt
Bluebeam - Sams Key.rtf
Positive Pay Accounts.xlsx
VMRDS.rdp
Map-Shares.bat
Settings to connect viaA NetExtender.txt
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.
ThreatCluster capture
Logo featuring the text "Johnson Development" in a bold, modern font.
onion leak page5.9 KB