AECOM
Data Breach on September 18, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | aecom.com | ||
| Claimed By | BrainCipher | ||
| Date Discovered | Sep 18, 2026 | ||
| Description | AECOM is an infrastructure consulting and engineering company based in the USA (Texas), providing planning, design, engineering, program management, and infrastructure services worldwide. | ||
| Leak Size | 670GB |
Credential Exposure for aecom.com
We've indexed 28,010 @aecom.com accounts from external breaches, plus 6,636 credentials for aecom.com itself.
Last checked Nov 1, 2026
| @aecom.com addresses from external breaches | |
|---|---|
| Combo lists | 17,768 accounts · most recent Nov 1, 2026 |
| Third-party breaches | 14,759 accounts · across 1003 breaches · 13,243 with a plaintext password · most recent Oct 23, 2026 |
| Passwords for aecom.com accounts | |
|---|---|
| Combo lists | 3,651 logins · most recent Nov 1, 2026 |
| Infostealer logs | 3,106 logins · 2,588 infected devices · most recent Nov 1, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
AECOM was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.