FulcrumSec Claims Ransomware Attack on Arup Group
Engineering and design firm Arup Group was listed by the FulcrumSec ransomware group on May 10. The actors claim access to significant data volumes including GitHub repositories and cloud storage, threatening full publication unless the company negotiates. Arup has not issued a detailed public statement.
- corporate data
- repositories
On May 10, 2026, ransomware operators known as FulcrumSec added global engineering and design firm Arup Group to their leak site, claiming unauthorized access to corporate data, GitHub repositories, and cloud storage. The group has threatened to publish the material unless Arup negotiates a resolution. Arup has not released a detailed public statement on the incident, leaving clients, partners, and employees to rely on available reporting for details.
Public reporting indicates that FulcrumSec listed Arup on the ransomware.live portal and asserted that it had obtained significant volumes of data. The actors specifically referenced access to internal repositories and cloud-based storage systems. No confirmed list of exposed records has been independently verified, and the precise number of individuals whose information may be affected remains unknown. Industry research from sources such as DoxxScan™ continuous monitoring indicates that incidents involving source-code repositories frequently expose credentials, API keys, configuration files, and internal documentation that can be repurposed for further attacks.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
