lya Construtora

lya Construtora was compromised in a ransomware attack attributed to ransomhouse in August 2026. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.

ransomhouse operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Álya Construtora is one of Brazil's leading privately owned engineering and construction companies, specializing in complex infrastructure, industrial, energy, urban mobility, and building projects with more than 70 years of operating experience.