The incransom ransomware group listed CF Construction Ltd on its data leak site on 2025-07-15. Country: CA Sector: Manufacturing Claim as published on the leak site: A list of files related to various aspects of the company's business will soon be available, including financial documents (Accounting-AP, Credit, Financial, Payroll, Tax), administrative and operational materials (ADMINISTRATION ITEMS, Operations-Management), confidential data (Confidential, Personal, Private), and contractor and vendor documents (Subcontractors, SUPPLIERS). Also included are several non-disclosure agreements (NDAs) with various organizations (CF Construction, MAESTRO TECHNOLOGIES, ACR-Stirling McArthur, Spira, etc.). As well as personal information such as passports, credit cards, etc.