PULSE
FEED
ransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Servicesransomwallstreet reclama a Briab Group AB · SE · Not Foundransomwallstreet reclama a Danvikshem (Stiftelsen Danviks Hospital) · SE · Healthcareransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Servicesransomwallstreet reclama a Briab Group AB · SE · Not Foundransomwallstreet reclama a Danvikshem (Stiftelsen Danviks Hospital) · SE · Healthcare
Ransomware · Claim30 September 2026 · 16:55 UTC
CLAIMclaimed byAURORA

Buford-Thompson Company, LTD

Buford-Thompson Company, LTD

CountryUSUnited States
SectorManufacturing
Key factsRECORD
Ransom amountNot disclosed
Data size exfiltratedNot disclosed
Screenshot on leak siteYes
Press mentioned by groupNo
Description

[construction] Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state. The exposed dataset totals 1.707 TB and includes: 5 years of W-2 EFW2 files (2021–2025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees — every SSN readable without any decryption. 9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation — legal strategy, discovery responses, and counsel communications. Complete Frost Bank infrastructure — four account numbers, ACH routing credentials, line-of-credit agreements (renewed April 2026), signature cards, and monthly bank statements spanning 2022–2026. 36+ active school construction projects — blueprints, bid estimates, cost structures, subcontractor pricing, and change orders for ISD projects across Texas. A competitor's dream dataset. 2,000+ donor records from Human Services Campus (Phoenix homeless-services nonprofit) with full PII: name, address, phone, email, employer, and donation amounts. QuickBooks company files (.QBW) from Along Side Ministries (Phoenix prison ministry) containing complete accounting, donor, and likely payroll data. Thompson family personal records — owner personal insurance, loans, ranch property (Jack County), airplane ownership, bond dividends, and personal tax documents.

Other victims from group · ±48h1
AgoVictimCountrySectorSizeCap.
13d
Laboratorios Roemmers SAICFroemmers.com.ar
ARHealthcare—●Argentina