Aegis Project Controls, a US construction company, suffered a ransomware attack claimed by the DragonForce group around January 26, 2026, and publicly disclosed on February 28, 2026. The attackers reportedly exfiltrated approximately 214GB of sensitive files, projects, and documents related to military-critical facilities (e.g., Space Fence, Nitrocellulose Facility), biosecurity laboratories (USAMRIID), and critical infrastructure.
The confirmed data types involved in this incident are files and project documents. The number of affected individuals has not been specified, and there is no public confirmation of whether personal data such as SSNs, medical records, or financial information was compromised. It remains unclear how many individuals were truly affected in this 2026 data breach. Exposure appears to be limited to proprietary project documents rather than individual records. There are no reports of regulatory filings or official breach notification letters at this time.
Details can emerge later as the situation unfolds, and breach notices may be delayed.