hiveleak attacks BL Harbert International

Incident Date:

September 21, 2022

World map



hiveleak attacks BL Harbert International


BL Harbert International




Birmingham, USA

Alabama, USA

First Reported

September 21, 2022

BL Harbert International Suffers Ransomware Attack by Hiveleak

Company Overview

BL Harbert International, a leading construction company with a global presence, has been targeted by the ransomware group Hiveleak. The attack was announced on the dark web leak site, affecting the company's operations and digital infrastructure.

As a prominent player in the construction sector, BL Harbert International focuses on building safe environments and eco-friendly solutions in the communities they serve. The company operates worldwide, providing preconstruction, design-build, and MEP engineering services for U.S. Government secure facilities, civil/industrial, commercial, and hospitality clients.

Company Size and Distinction

With a significant workforce of over 10,000 employees and a reported revenue of $1 billion in 2022, BL Harbert International has established itself as a top employer. The company's commitment to safety, trust, and respect has cultivated a culture that empowers employees to grow and succeed, earning them a distinguished reputation in the industry.

Vulnerabilities and Targeting

Despite their size and reputation, BL Harbert International has fallen victim to Hiveleak, a ransomware group notorious for its attacks on various industries. The specific reasons for targeting BL Harbert International have not been disclosed. However, the company's global presence and large workforce make it an attractive target for cybercriminals, underscoring the pervasive threat of cybercrime across the construction sector.

The ransomware attack on BL Harbert International by Hiveleak underscores the critical need for organizations to remain vigilant and implement robust cybersecurity measures. In an era where cyber threats are increasingly sophisticated, companies, regardless of their size and sector, must prioritize the protection of their digital assets to safeguard against such attacks.


BL Harbert International. (n.d.). Home | BL Harbert International. Retrieved April 10, 2023, from

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.