Ransomware group BrainCipher hits aecom.com
aecom.com — a professional services target operating in US has been listed by the BrainCipher ransomware group on 2026-09-17. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | aecom.com |
|---|---|
| Threat Group | BrainCipher |
| Summary | [AI generated] AECOM is a global infrastructure and engineering firm headquartered in the United States. The company provides design, consulting, construction, and management services across sectors including transportation, water, environment, energy, and government facilities. Operating in over 150 countries, AECOM serves public and private clients worldwide and is recognized as one of the largest engineering services firms globally. |
| Date of Breach | 2026-09-17 |
| Discovery Date | 2026-09-17 |
| Region | US |
| Target Domain | aecom.com |
| Business Sector | Professional Services |
| Severity | MEDIUM |
Claim by BrainCipher
[AI generated] AECOM is a global infrastructure and engineering firm headquartered in the United States. The company provides design, consulting, construction, and management services across sectors including transportation, water, environment, energy, and government facilities. Operating in over 150 countries, AECOM serves public and private clients worldwide and is recognized as one of the largest engineering services firms globally.
Posted by the BrainCipher threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
aecom.com
Leak post (onion / Tor)
http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/n/aecom-com
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.