Pelli Clarke Pelli Architects targeted by Booba Project ransomware group

• Ransomware group: Booba Project
• Country: United States
• Sector: Professional Services
• Announcement date: July 22, 2026

Booba Project claims data theft from Pelli Clarke Pelli Architects

The threat actor group known as Booba Project has announced a data breach involving Pelli Clarke Pelli Architects. According to a notice published on the group's leak site, the attackers claim to have successfully exfiltrated a significant volume of data from the organization's systems. This announcement, which was posted on July 22, 2026, marks a new incident involving the architectural firm.

The claim made by the Booba Project suggests a targeted operation aimed at acquiring sensitive information. While the announcement confirms the intent to leak data, the specific circumstances surrounding the initial intrusion remain unclear. Ransomware groups often use these leak sites to exert pressure on victims by demonstrating that they have successfully bypassed security perimeters and accessed internal files.

Details of the alleged data exfiltration

The Booba Project has made specific claims regarding the scale of the data they have allegedly obtained. According to the group's announcement, the volume of stolen information is estimated at 45 GB. This represents a substantial amount of digital assets that the group claims to have moved from the organization's infrastructure to their own controlled environments.

Regarding the specific nature of the information, the listing provides no detailed information regarding the content of the allegedly stolen data. Furthermore, the group has not provided any screenshots to verify the authenticity of the stolen files. As a result, the exact types of documents or sensitive files contained within the 45 GB of data remain unknown to the public.

Summary of claimed data

• No specific data types were named in the listing.

About Pelli Clarke Pelli Architects

Pelli Clarke Pelli Architects, which is now known as Pelli Clarke & Partners, is a prominent international architectural firm. The organization is recognized for designing a wide variety of large-scale and culturally significant structures across the globe, including skyscrapers, airports, and various cultural landmarks. The firm maintains its headquarters in New Haven, Connecticut, within the United States.

Potential implications and industry risks

This incident may negatively impact the organization's operational continuity and commercial reputation. Depending on the nature of the data, risks such as identity theft and targeted phishing attacks against employees or business partners may emerge. Because the organization is based in the US, legal processes under relevant state laws and data protection regulations may be triggered as a result of this claim.

Information regarding the Booba Project group is limited, thus their motivations and attack methodologies remain uncertain. It is possible that the group may attempt to exert ransom pressure on the organization through double extortion tactics. Double extortion is a common strategy in modern ransomware attacks where threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release if a ransom is not paid.

For organizations operating in the professional services sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized data transfers. As the threat landscape evolves, maintaining a strong posture against exfiltration-focused attacks is a critical component of modern risk management.