ransomware
Potential
Egypt (EG)
construction
Rowad Modern Engineering listed by the Crypto24 ransomware group
Rowad Modern Engineering
CompanyRowad Modern Engineering
CountryEgypt (EG)
Sectorconstruction
Breach date2026-03-05
People affected100,000
Ransomware groupcrypto24
Data typesNot disclosed
<p>On 05 March 2026, the <strong>crypto24</strong> ransomware group listed <strong>Rowad Modern Engineering</strong> on its dedicated leak site in Egypt. The group claims to have exfiltrated data from the organisation, a construction and engineering firm, before publishing the victim on its leak site.</p>
<h2>What the source reveals</h2>
<p>[AI generated] Rowad Modern Engineering is an Egypt-based construction firm specializing in the implementation and delivery of various construction projects. The company offers services ranging from civil engineering and construction management to project costing and risk management. It has a prominent role in constructing infrastructure, roads, commercial, and residential buildings.</p>
<h2>Risks</h2>
<ul>
<li>Exposure of commercial contracts, supplier agreements, procurement data, and pricing structures</li>
<li>Supply chain disruption if operational, logistics, or inventory management systems were encrypted</li>
<li>Competitive intelligence loss if proprietary business data or trade secrets were published</li>
<li>Employee personal data exposure including payroll records, tax identification, and banking details</li>
<li>Permanent loss of data integrity if backups were also compromised or encrypted</li>
<li>Regulatory and legal consequences depending on data protection laws in the affected jurisdictions</li>
</ul>
<h2>What remains unknown</h2>
<ul>
<li>the volume and specific data types exfiltrated from the organisation</li>
<li>the date of the initial intrusion and the attack vector used</li>
<li>whether the organisation engaged with the attackers or paid any ransom demand</li>
</ul>
<h2>Conclusion</h2>
<p>Ransomware attacks on construction organisations can disrupt operations and expose sensitive data across supply chains. The affected organisation should conduct a thorough forensic investigation, notify relevant regulatory authorities, and communicate transparently with affected stakeholders. Organisations in Egypt should review their ransomware preparedness, including offline backup verification and incident response testing.</p>