AECOM
Data Breach on September 18, 2026
| Data Breach Report | |||
|---|---|---|---|
| Victim | aecom.com | ||
| Claimed By | BrainCipher | ||
| Date Discovered | Sep 18, 2026 | ||
| Description | AECOM is an infrastructure consulting and engineering company based in the USA (Texas), providing planning, design, engineering, program management, and infrastructure services worldwide. | ||
| Leak Size | 670GB |
Credential Exposure for aecom.com
We've indexed 27,434 @aecom.com accounts from external breaches, plus 6,077 credentials for aecom.com itself.
Last checked Sep 18, 2026
| @aecom.com addresses from external breaches | |
|---|---|
| Combo lists | 17,153 accounts · most recent Sep 18, 2026 |
| Third-party breaches | 14,757 accounts · across 1001 breaches · 13,242 with a plaintext password · most recent Aug 31, 2026 |
| Passwords for aecom.com accounts | |
|---|---|
| Combo lists | 3,161 logins · most recent Sep 18, 2026 |
| Infostealer logs | 3,035 logins · 2,562 infected devices · most recent Sep 16, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
AECOM was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.