A ransomware group calling itself Qilin claims to have targeted AUM Construction, according to a listing on the group’s own leak site dated August 29, 2026. This claim was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim has not been verified independently, and AUM Construction has not issued any public confirmation of an incident.
What we know — and don’t
- A group calling itself Qilin listed AUM Construction on its leak site with a claimed date of August 29, 2026.
- AUM Construction operates outside the sectors with specific regulatory disclosure requirements tracked here, and is categorized as ‘other’ for reporting purposes.
- The specific data types the group claims to have obtained have not been disclosed publicly or confirmed by any party.
- No independent verification of the claim currently exists, and it is not yet known whether the company has acknowledged or investigated the incident.
- This page reflects only what has appeared on the group’s leak-site listing as of the date noted above.
What should you do if you have an account with this company?
- Change your password for any account associated with AUM Construction, and avoid reusing that password elsewhere.
- Enable two-factor authentication wherever it is offered, particularly for email and financial accounts.
- Be cautious of unexpected emails, texts, or calls referencing AUM Construction, invoices, or project details, as these could be phishing attempts.
- Monitor bank and credit card statements for unfamiliar charges, especially if you have done business or shared payment information with this company.
- Consider using an identity monitoring service like a service like Aura or LifeLock to get alerted if your personal information appears somewhere it shouldn’t.
- Keep records of any suspicious activity in case you need to report it to your bank or relevant authorities.
BreachLetter will update this page if AUM Construction confirms this incident, if new details emerge, or if the matter is officially reported to regulators.