RANSOMWARE VICTIMCONSTRUCTIONDUPLICATE CLAIM

Ferretti Construction

akira📍 Italy (IT)📅 February 2, 2026
8
same group

Attack Intelligence

Ferretti Construction was compromised in a ransomware attack attributed to akira in February 2026. The organization, operating in the Construction sector in Italy, was added to the group's data leak site as part of an extortion campaign.

akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Ferretti Construction is an Italian Engineering & Construction Co mpany with a track record of 100 years in the field of industria l construction. They provide services from basic & detail enginee ring, to construction as well as project and construction managem ent. We will upload 66gb of corporate data soon. Detailed employee inf ormation (passports, DLs and so on), financials, confidentiality agreements, contracts and agreements, lots of project files, NDAs , etc.

Additional Details

Other Victims — akira (8)

Quick Facts

CountryItaly (IT)
SectorConstruction
Attack DateFeb 2, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

akira
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.