Skip to content
Ransomware

Noll and Tam Architects listed on Termite ransomware leak site

The threat group known as Termite has listed Noll and Tam Architects on its leak site, claiming to have obtained company data.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Termite
  • Country: United States
  • Sector: Professional Services
  • Announcement date: March 17, 2026

Termite group claims data breach at Noll and Tam Architects

The threat actor known as Termite has officially listed Noll and Tam Architects on its dedicated leak site. According to the announcement, the group claims to have successfully targeted the organization and obtained a significant volume of company data. This development follows a pattern common in modern cyberattacks where threat actors use public platforms to pressure victims by threatening to release stolen information.

In many contemporary ransomware campaigns, groups employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public website serves as additional leverage to compel the victim into paying a ransom. While the specific details of the breach remain limited to the group's claims, the listing indicates a significant breach of confidentiality for the targeted firm.

Details of the alleged attack

The announcement regarding Noll and Tam Architects was published on the Termite leak site on March 17, 2026. Through this post, the group claims that they gained unauthorized access to the organization's network on March 16, 2026. This suggests a rapid progression from the initial intrusion to the public announcement of the breach.

The group has stated that they have compromised approximately 300 GB of data. According to the group's claims, this stolen information may be published on their leak site in the near future. At this stage, the group has not provided any specific details regarding the exact content of the alleged leaked data; the information provided in their announcement is limited to a note regarding the total size of the data set.

Data involved in the claim

The listing names no specific data types that have been compromised.

About Noll and Tam Architects

Noll and Tam Architects is an architectural design firm that focuses on projects designed to serve the common good. The firm specializes in a variety of community-oriented facilities, including community centers, libraries, educational facilities, and veterinary hospitals. Their design approach is characterized by an emphasis on sustainability and empathy in their architectural projects.

Impact and industry considerations

This incident may negatively impact the operational continuity and commercial reputation of Noll and Tam Architects. The alleged 300 GB data set could potentially contain sensitive information regarding architectural projects, employee records, or client contracts. Because the organization is based in the United States, a potential data breach may lead to legal proceedings under state-level data protection laws and industry-specific regulations.

Furthermore, the leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing attacks against the organization or its stakeholders. For professional services firms, the loss of proprietary project designs or sensitive client information can have long-term consequences for business relationships and competitive standing.

Organizations operating within the professional services sector can take several defensive steps to mitigate such risks. Implementing robust multi-factor authentication (MFA) across all remote access points is a fundamental security measure. Additionally, maintaining regular, offline backups and implementing strict network segmentation can help limit the movement of attackers within a network. Continuous monitoring of network traffic and regular security awareness training for employees are also vital components of a comprehensive defense strategy to prevent unauthorized access and data exfiltration.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories