Ransomware Group: AKIRA

VICTIM NAME: Hogan Construction Group

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On August 22, 2025, Hogan Construction Group is presented on a ransomware leak page as the victim of a data-leak incident. The page describes the company as a US-based construction firm offering a comprehensive platform for value-based, client-focused construction management, with services including interior renovations, design-and-build projects, historic restorations, and adaptive reuse. The attackers claim they have access to more than 16GB of internal documents and are prepared to upload them, indicating a data-leak scenario rather than a full system encryption. The provided data uses the post date as the publication moment, and no separate compromise date is listed.

The leak post outlines the types of data allegedly exfiltrated, including financial records (audits, payment details, invoices) and sensitive personal information belonging to employees and customers (such as personal identifiers and documents like birth and death certificates). The attackers imply they hold this material and may release it publicly. The dataset does not include any specified ransom amount, and while a claim URL is indicated on the page, the actual URL is not disclosed here. The listing appears to contain no screenshots or image files, and there are no downloads or attachments noted in the provided data.

Overall, the leak page frames Hogan Construction Group within the construction sector as part of a data-leak event with a claimed data volume of over 16GB. Because no compromise date is provided in the data, the publication date (August 22, 2025) is treated as the post date. No image materials or ransom figures are disclosed in this summary.