RANSOMWARE VICTIMCONSTRUCTION⚠ DUPLICATE CLAIM
R L Larson Excavating
akira📅 April 14, 2026
8
same group
Attack Intelligence
R L Larson Excavating was compromised in a ransomware attack attributed to akira in April 2026. The organization, operating in the Construction sector in Unknown, was added to the group's data leak site as part of an extortion campaign.
akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
R. L. Larson Excavating Inc., is an excavating contractor based i n St. Cloud, MN. We will upload 30gb of corporate data soon. Personal data of empl oyees (DLs, w9 forms and others), financials, drawings and specif ications, contracts and agreements, projects, and so on.
Additional Details
Other Victims — akira (8)
Basic Grain Products
Agriculture and Food Production
Aug 2026
Pharma Test Apparatebau AG
CH · Manufacturing
Aug 2026
University SprinklerSystems
Manufacturing
Aug 2026
Albers Mechanical Contractors
US · Manufacturing
Aug 2026
Belasco Electric
US · Energy & Utilities
Aug 2026
Northwood Country Club
US · Hospitality
Jul 2026
Franz Krause artworksgroup
US · Other
Jul 2026
Emerge2 Digital
CA · Technology
Jul 2026
Quick Facts
SectorConstruction
Attack DateApr 14, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.