Skip to content
Leak-site post naming Montana Civil Contractors, captured by ThreatCluster
Back to victims

Montana Civil Contractors

qilin

Ransomware leak-site victim intelligence · EN

Views
776
Posted
Sep 15, 2026
Country
US
Industry
Civil Engineering Construction

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reporting

The leak post claims Montana Civil Contractors' data has been exfiltrated, including HR and recruitment records, internal documentation and source code; the post is published and does not disclose data volume. The leak page identifies the victim as Montana Civil Contractors (domain montanacivil.com, Civil Engineering Construction). The leak page attributes the claims to the group qilin.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
montanacivil.com

What was taken

Montana Civil Contractors

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the outline of a hand and the text "Montana Civil Contractors, Inc." in a stylized font.
onion leak page6.8 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion