Aegis Project Controls
Attack Intelligence
Aegis Project Controls was compromised in a ransomware attack attributed to win.dragonforce in February 2026. The organization, operating in the Construction sector in United States, was added to the group's data leak site as part of an extortion campaign.
win.dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Aegis Project Controls is a construction company providing 4d scheduling, training, and construction scheduling services. 214GB of files, projects, and documents that threaten US national security. These include projects on military-critical facilities (Space Fence, Nitrocellulose Facility, etc.), biosecurity laboratories (USAMRIID), critical infrastructure facilities, and others. We know you didn't contact the FBI after the attack on your infrastructure, but now the FBI will come to you. We advise you to contact us immediately; your IT department knows how. You have 15 days before this data is made public. Dear David J. Hatwell (+1 269-673-8962, +1 360-918-3187, +1 240-331-0437), we promise you public shame and the destruction of your company if you don't pay. Time has begun.