Rafael Construction
bd_901acd8b9165bdfe · schema v1 · pii pii-v1
Full breach record for Rafael Construction →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Akira on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Rafael Construction is a full-service commercial general contract or based in Las Vegas, Nevada, specializing in commercial develop ment with services including ground-up construction, design-build , construction management, and public works projects. We will upload more than 20gb of corporate data soon. Personal em ployee files (passports, DL), financials, confidential internal f iles, client information, NDAs, etc.
Source provenance
- Source URL
- https://www.ransomware.live/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 24, 2025
- Raw hash
- cca2ddfd4b5b801b67a2abcd7430ea0727ca86cc27c2e9390e3d2575e9292e6c
Reporting entity
- Name
- akira
Victim entity
- Name
- Rafael Constructionnorm: rafael construction
- Domain
- rafaelconstruction.com
- Industry
- Construction
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· akira
- Threat actor
- AkiraExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.