Ransom! Fabcon (FEB-2026)

The ransomware claim alleges that threat actor Akira will upload nearly 190 GB of Fabcon’s corporate data, including client information, employee personal documents (passports, SSNs, DLs), detailed financials, confidential project files, and NDAs. Kerkstra Precast data is also expected to be disclosed. #UnitedStates

Incident Details

  • Victim: Fabcon
  • Sector: Construction
  • Country: US
  • Actor: akira
  • Source:
  • Discovered: 2026-02-20 14:58:59.285926
  • Published: 2026-02-20 00:00:00.000000

Information

  • Manufactures and erects precast concrete wall panels for every type of structure
  • Projects range from a 10,000 square-foot machine shop to a one-million square-foot distribution center
  • Projects also range from a single-story bakery to a 16-story housing facility
  • Will upload almost 190 GB of corporate data soon
  • Data to be disclosed includes client information, employee personal documents (passports, SSNs, driver’s licenses, etc.), detailed financials, confidential project files, NDAs, and more
  • Kerkstra Precast company data will be disclosed as well

Disclaimer: This post is based on public claims made by the ransomware group "akira". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live