Esposito Bros. Construction Ltd

Esposito Bros. Construction Ltd was compromised in a ransomware attack attributed to dragonforce in February 2026. The organization, operating in the Construction sector in Canada, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Esposito Bros. Construction Ltd. is a leading construction company based in Bolton, Ontario, recognized as one of the top bridge contractors. With over four decades of experience, the firm specializes in managing complex projects involving bridges, roads, demolition, and underground infrastructure. Their commitment to safety and innovation ensures that they provide exceptional construction services while fostering a collaborative work environment. Targeting a diverse clientele, they deliver groundbreaking solutions while maintaining a strong focus on environmental sensitivity and community engagement.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.