Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

ehdd.com

ehdd.com

ehdd.com was listed on the INC Ransom leak site on Feb 20, 2025. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
INC Ransom
First listed
Feb 20, 2025
Claims recorded
1

Leak-Site Claim.

INC RansomConfirmed claim
Posted on the leak site
Feb 20, 2025
Collected by Brandefense
Jul 12, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Founded in 1946, EHDD seeks to create built environments that enhance our culture, honor the natural environment, and respect and delight the people who use them. Headquartered in San Francisco, EHDD serves clients around the world in Aquariums, Museums and Science Centers, Education, Corporate Office, Mixed-Use Development, and Government. EHDD is a Top 10 AIA COTE honoree, and featured in " The Habits of High-Performance Firms, Lessons from frequent winners of the AIA COTE Top Ten Award.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
verveba.com \
verveba.com
INC RansomUSUnited StatesTelecommunicationsNot stated
fairfeelegalservices.com
fairfeelegalservices.com
INC RansomUSUnited StatesConsultingNot stated
nowaszkola.com
nowaszkola.com
INC RansomPLPolandEducation and ResearchNot stated
coopecaja.fi.cr
coopecaja.fi.cr
INC RansomCRCosta RicaFinancial ServicesNot stated
FINANCIAMENTO LTDA
lexcursos.com.br
INC RansomBRBrazilManufacturingNot stated
Wolf & Sofsky GmbH
wolfusofsky.de
INC RansomDEGermanyConstructionNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
American Campus
americancampus.com
HelixUSUnited StatesConstructionNot stated
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
SMIC US Company (Sunnyvale, CA, US arm of Semiconductor Manufacturing International Corpo...
smics.com
N0nCNChinaManufacturingNot stated
mckenneys
mckenneys.com
Iah6477USUnited StatesConstruction295.9 GB
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.