RANSOMWARE VICTIMCONSTRUCTION

McCarthy Inc

mccarthyinc.com
kairos📍 United States (US)📅 May 15, 2026
8
same group

Attack Intelligence

McCarthy Inc was compromised in a ransomware attack attributed to kairos in May 2026. The organization, operating in the Construction sector in United States, was added to the group's data leak site as part of an extortion campaign.

kairos operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

McCarthy, Inc., based in Savannah, Georgia, has been providing quality doors, frames, hardware, and related products since 1955. The company specializes in metal and wood doors, including architectural-grade flush doors and custom stile and rail units, along with a variety of specialty items. McCarthy, Inc. offers comprehensive services from project inception to completion, aiming to build lasting relationships with clients across various industries such as healthcare, education, and hospitality. Their commitment to customer satisfaction is reflected in their extensive product offerings and dedicated service.

Other Victims — kairos (8)

Quick Facts

CountryUnited States (US)
SectorConstruction
Attack DateMay 15, 2026
Domainmccarthyinc.com
Intel Sourceransomlook

Threat Group

kairos
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.