Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Red Phoenix Construction

redphoenixconstruction.com

Red Phoenix Construction was listed on the Qilin and RansomHub leak site on Nov 4, 2024. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
Qilin, RansomHub
First listed
Nov 4, 2024
Claims recorded
2

2 Leak-Site Claims.

QilinConfirmed claim
Posted on the leak site
Nov 4, 2024
Collected by Brandefense
Nov 1, 2025
Data claimed
15 GB
RansomHubConfirmed claim
Posted on the leak site
Nov 4, 2024
Collected by Brandefense
Jul 12, 2025
Data claimed
Not stated
Leak-site post text, written by the group
[IA generated] Red Phoenix Construction is a company specializing in construction and renovation services. They focus on delivering high-quality craftsmanship for residential and commercial projects. The company is known for its attention to detail, reliability, and commitment to customer satisfaction. Their services include new builds, remodels, and various construction solutions tailored to client needs.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Belcorp
belcorp.biz
QilinPEPeruRetailNot stated
Llano Independent School District
llanoisd.org
QilinUSUnited StatesEducation and ResearchNot stated
BRUTRA Logistek
brutra-logistiek.nl
QilinNLNetherlandsTransportation and LogisticsNot stated
Pengurusan Aset Air Berhad
paab.my
QilinMYMalaysiaEnergy and UtilitiesNot stated
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated
Mastelli S.r.l.
mastelli.com
QilinITItalyHealthcareNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.