AECOM
Data Breach on September 18, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | aecom.com | ||
| Claimed By | BrainCipher | ||
| Date Discovered | Sep 18, 2026 | ||
| Description | AECOM is an infrastructure consulting and engineering company based in the USA (Texas), providing planning, design, engineering, program management, and infrastructure services worldwide. | ||
| Leak Size | 670GB |
Credential Exposure for aecom.com
We've indexed 27,632 @aecom.com accounts from external breaches, plus 6,272 credentials for aecom.com itself.
Last checked Oct 11, 2026
| @aecom.com addresses from external breaches | |
|---|---|
| Combo lists | 17,359 accounts · most recent Oct 10, 2026 |
| Third-party breaches | 14,758 accounts · across 1002 breaches · 13,242 with a plaintext password · most recent Oct 6, 2026 |
| Passwords for aecom.com accounts | |
|---|---|
| Combo lists | 3,327 logins · most recent Oct 10, 2026 |
| Infostealer logs | 3,066 logins · 2,574 infected devices · most recent Oct 10, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
AECOM was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.