The document consists of two invoices from northernconstruction.com that have been compromised by the threat actor qilin, associated with Northern Construction Service, LLC. The ransomware claim indicates data theft and potential disruption of their construction operations in the United States. #UnitedStates
Incident Details
- Victim: northernconstruction.com
- Country:
- Actor: qilin
- Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=dde2b56a-d532-385c-93cb-3c4fe58e5fdf
- Discovered: 2025-08-12 20:04:03.110278
- Published: 2025-08-12 00:00:00.000000
Information
- Northern Construction Service, LLC is a Massachusetts-based general contractor specializing in bridge construction, construction site work, port and harbor work, concrete work, and utility services.
- The document consists of two invoices from the ransomware victim.
Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.