PULSE
ES
FEED
ransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Servicesransomwallstreet reclama a Briab Group AB · SE · Not Foundransomwallstreet reclama a Danvikshem (Stiftelsen Danviks Hospital) · SE · Healthcareransomwallstreet reclama a Brunnberg & Forshed Arkitektkontor · SE · Professional Servicesransomwallstreet reclama a Mantum Holding AB · SE · Otherransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Vendus Sweden AB · SE · Otherransomwallstreet reclama a Fab Support AB · SE · Manufacturingransomwallstreet reclama a Byrån för Arkitektur och Urbanism · SE · Professional Servicesransomwallstreet reclama a Briab Group AB · SE · Not Foundransomwallstreet reclama a Danvikshem (Stiftelsen Danviks Hospital) · SE · Healthcareransomwallstreet reclama a Brunnberg & Forshed Arkitektkontor · SE · Professional Servicesransomwallstreet reclama a Mantum Holding AB · SE · Other
Ransomware · Claim28 September 2026 · 00:35 UTC
CLAIMclaimed byINCRANSOM

AHEAD

CountryUSUnited States
SectorNot Found
View group profile →
Key factsRECORD
Ransom amountNot disclosed
Data size exfiltratedNot disclosed
Screenshot on leak siteYes
Press mentioned by groupNo
Description

AHEAD is a Chicago-based IT consulting and engineering firm specializing in the digital transformation of large enterprises. It offers strategic consulting and managed services across cloud, cybersecurity, data and AI, infrastructure, and operations. The company positions itself as an "engineering-led" partner that takes responsibility for outcomes at every stage — from design to ongoing operations. Following its acquisition of CDI, AHEAD's revenue exceeded $3.7 billion, with a workforce of more than 2,500 employees across 40 locations worldwide.

Other victims from group · ±48h3
AgoVictimCountrySectorSizeCap.
15d
bcx.co.zabcx.co.za
ZATechnology—●South Africa15d
bakemyday.sebakemyday.se
SERetail & E-Commerce—●Sweden16d
nsbsd.orgnsbsd.org
USGovernment & Defense—●United States