Back to Victim Disclosures

AECOM

metaencryptorransomware groupaecom.com
Published
Sep 17, 2026

Added Sep 17, 2026

UPDATE: Files uploaded. AECOM is a leading U.S.-based global infrastructure consulting and engineering company. It provides design, engineering, construction management, and advisory services for major infrastructure projects across transportation, water, energy, buildings, environmental services, and government markets. AECOM operates worldwide and serves public- and private-sector clients.

Actor timeline discrepancies

Deadline extended Listing date inconsistent
Evidence & timeline (50)

The stated deadline was 02 Oct 2026, 18:10 UTC. On 05 Oct 2026, 18:31 UTC, the source still indicated an unpublished status. A later status or deadline was observed on 07 Oct 2026, 16:25 UTC.

Deadline changed from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC, observed on 16 Oct 2026, 14:15 UTC. 74 extension(s) recorded. The countdown follows the latest stated deadline.

We already observed this disclosure on 17 Sept 2026, 12:48 UTC. On 29 Sept 2026, 08:15 UTC, the actor described it as "4 days ago", which conflicts with our earlier evidence even allowing for rounded dates.

Actor-provided dates are claims. A deadline extension does not establish whether stolen data is authentic or whether payment would result in recovery.

  • 16 Oct 2026, 14:15 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 13:27 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 12:47 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 12:00 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 11:30 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 10:25 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 07:58 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 07:22 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 06:42 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 05:46 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 05:06 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 03:44 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 03:12 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 02:35 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 02:01 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 01:21 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 00:51 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 16 Oct 2026, 00:04 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 22:56 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 22:55 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 22:23 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 21:50 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 21:15 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 20:48 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 20:28 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 19:57 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 19:27 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 18:56 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 18:36 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 18:07 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 17:37 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 17:15 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 16:46 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 16:18 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 15:47 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 15:13 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 14:51 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 14:25 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 13:50 UTC: Deadline extended from 26 Sept 2026, 18:10 UTC to 02 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 12:50 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 12:30 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 12:12 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 11:47 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 11:14 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 10:43 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 10:21 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 09:52 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 09:18 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 08:51 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
  • 15 Oct 2026, 08:29 UTC: Deadline extended from 02 Oct 2026, 18:10 UTC to 20 Oct 2026, 18:10 UTC
Leak Page Screenshot

Organization Details

Organization

AECOM

Domain

aecom.com

Country

πŸ‡ΊπŸ‡Έ US

Industry Sector

Construction

aecom.com

Leak Data

Data Size

1.2 TB

Published

Sep 26, 2026

Publication Status

Published

Discovered

Sep 17, 2026

Leak URL
https://metacrpttdfpbm4qoxzcrqqgr6e6zafpazgxm72knmujw2mwvi34rwad.onion
Site OnlineLast scanned 10m ago

Threat Group

metaencryptor

ransomware group

View full group profile β†’

Quick Facts

CountryπŸ‡ΊπŸ‡Έ US
SectorConstruction
Data Size1.2 TB
AddedSep 17, 2026