Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Buford-Thompson Company, LTD

buford-thompson.com

Buford-Thompson Company, LTD was listed on the Aurora leak site on Sep 30, 2026. Information as of Oct 19, 2026.

Country: United StatesIndustry: Construction
Updated continuously · figures as of Oct 19, 2026
Claimed by
Aurora
First listed
Sep 30, 2026
Claims recorded
1

Leak-Site Claim.

AuroraConfirmed claim
Posted on the leak site
Sep 30, 2026
Collected by Brandefense
Sep 30, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across the state. The exposed dataset totals 1.707 TB and includes: 5 years of W-2 EFW2 files (2021-2025) containing plaintext Social Security numbers, wages, and addresses for 350+ current and former employees, every SSN readable without any decryption. 9.3 GB of attorney-client privileged files from the Stanton ISD v. BTC litigation, legal strategy, discovery responses, and counsel communications. Complete Frost Bank infrastructure, four account numbers, ACH…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
Adams Warehouse & Delivery, Inc.AuroraUSUnited StatesTransportation and LogisticsNot stated
Estrategias BigMat S.L.U.AuroraESSpainRetailNot stated
The Buckner Company, Inc.AuroraUSUnited StatesEducation and ResearchNot stated
Rechtsanwaltskanzlei Dr. Bien
bien-rechtsanwaelte.de
AuroraDEGermanyLegal ServicesNot stated
Infomedia A/SAuroraINIndiaTechnologyNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
American Campus
americancampus.com
HelixUSUnited StatesConstructionNot stated
mckenneys
mckenneys.com
Iah6477USUnited StatesConstruction295.9 GB
Smith Douglas Homes
smithdouglas.com
HelixUSUnited StatesConstructionNot stated
Macfarlan Capital Partners
macfarlan.com
PearUSUnited StatesConstruction350 GB
Solar Communications International
rftransparent.com
PearUSUnited StatesConstruction1.4 TB
KD Corp
kdconstruction.us
QilinUSUnited StatesConstructionNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.