The INC Ransom group has allegedly targeted CPH Corp, a prominent US-based architectural and engineering firm. CPH Corp is a full-service firm that designs critical public and private sector projects throughout the United States and the Caribbean. The company’s multi-disciplinary team is involved in developing essential infrastructure, including water and wastewater treatment systems, roadways, parks, and large-scale commercial and industrial complexes.
On September 4, 2025, the ransomware group added CPH Corp to its dark web leak site, claiming responsibility for a significant data breach. The attackers allege to have exfiltrated nearly 93 GB of data from the company’s systems. This incident places the sensitive data of a key player in the nation’s infrastructure development at risk, pending further confirmation from the company.
