Skip to content
Ransomware

Parkway Construction LLC listed on Anubis ransomware leak site

The Anubis ransomware group has listed technical drawings and project documents allegedly belonging to Parkway Construction LLC on their leak site.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Anubis
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: June 10, 2025

Anubis ransomware group claims data breach at Parkway Construction LLC

The Anubis ransomware group has listed data allegedly belonging to Parkway Construction LLC on its leak site. According to the announcement made on June 10, 2025, the group claims to have acquired sensitive documentation through a cyberattack. While the group has posted the organization's name on their platform, the specific details regarding the volume of data stolen or the exact ransom demand remain unknown.

The claim made by the Anubis group suggests a significant breach involving highly sensitive materials. Specifically, the group alleges that the shared documents contain technical blueprints of facilities belonging to major defense industry entities. The names of the organizations mentioned in relation to these facilities include L3Harris, General Atomics, and Virgin Galactic. The announcement suggests that the leaked materials include sensitive information regarding the security and structural details of these facilities.

Claimed data and affected information

The information allegedly stolen by the Anubis group is highly specialized and relates to the physical and structural aspects of industrial and defense-related sites. The group claims that the stolen files include technical blueprints and architectural plans that detail the infrastructure of critical facilities. This type of data is often targeted because it provides a roadmap of a facility's layout and its security measures.

The specific types of data allegedly involved in this incident include:

  • Technical drawings
  • Architectural project plans
  • Security infrastructure documents

The presence of such detailed documentation in a leak site poses a significant risk, as these files are intended to remain confidential to protect the integrity of the facilities they represent.

About Parkway Construction LLC

Parkway Construction is an American company providing general contracting and construction management services for commercial and industrial projects. It specializes in the construction of complex facilities and project management. Given its role in managing complex projects, the company serves as a vital link in the industrial and commercial construction sectors.

Potential implications and industry risks

The alleged leak may compromise the security protocols of entities within the defense industry supply chain. Given the sensitivity of the claimed documents, this situation could pose risks to the physical security of the involved facilities. Because the organization is based in the United States, the leak may lead to investigations under federal regulations and export control laws.

The Anubis group is characterized by limited public information, and it may be inferred that the group employs double-extortion tactics. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten the victim with its public release. This tactic increases the pressure on organizations to pay, as they face both operational downtime and the threat of reputational damage or regulatory fines.

Secondary risks associated with this incident may include the potential use of the leaked information in industrial espionage activities. When technical blueprints and security infrastructure details are exposed, they can be utilized by malicious actors to conduct physical or digital reconnaissance. This highlights the critical importance for organizations in the manufacturing and construction sectors to implement robust data protection measures, such as strict access controls, encryption for sensitive project files, and comprehensive monitoring of data movement to prevent unauthorized exfiltration.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories