FUTURE BUILDINGS WAS HACKED MORE THAN 150GB SENSETIVE DATA LEAKED Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On or around 21 February 2023, Future Buildings, a Canadian steel-buildings supplier, appeared on the leak site of the alphv ransomware group. The listing claimed that the company had been hacked and that more than 150 GB of sensitive data had been exfiltrated. Public reporting does not confirm independent verification of the intrusion, the exact volume of data, or the number of people affected. What is known so far is limited to the group's claim and the description of internal files taken in a ransomware attack.

For customers, employees, and partners of a mid-sized hardware and home-improvement firm, any confirmed exposure of internal files raises practical questions about what information may now be in circulation and what steps are worth taking while fuller details remain scarce.

Breaking down the breach

According to the available record, Future Buildings was listed by alphv on 21 February 2023. The headline associated with the listing stated that the company had been hacked and that more than 150 GB of sensitive data had been leaked. The only data category named is internal files exfiltrated in a ransomware attack. No public figure has been given for the number of people affected, and no technical description of the initial access method, dwell time, or encryption impact has been released in the material provided.

Because the listing originates from the threat actor, it remains an unverified claim unless and until the organisation or independent investigators state it. Timing beyond the report date, precise file inventories, and any ransom demand or payment status are undisclosed.

Inside alphv

alphv, also widely known in public reporting as BlackCat, is a ransomware operation that emerged in late 2021 and has operated under a ransomware-as-a-service model. Affiliates typically gain access to victim networks, move laterally, exfiltrate data, and then deploy ransomware while threatening to publish the stolen material on a dedicated leak site if payment is not made. The group has been associated with attacks across multiple sectors and geographies; its public leak site has been used to pressure victims by posting sample files or full archives.

In this case, the sole concrete assertion tied to Future Buildings is the leak-site listing itself and the accompanying claim of more than 150 GB of internal files. No further statements attributed to alphv about this specific victim appear in the given facts, so nothing beyond that claim is treated as established.

Who is Future Buildings?

Future Buildings is described as a family-owned and operated company that supplies steel buildings. It operates in the home-improvement and hardware retail sector in Canada, with approximately 132 employees and headquarters at 1405 Denison Street, Markham, Ontario. Public business profiles list annual revenue in the region of $27.2 million and provide standard customer-facing contact channels.

Organisations of this type routinely hold customer order and delivery records, employee and payroll information, supplier contracts, design or engineering files related to building projects, and internal financial and operational documents. A breach affecting such a firm is consequential because those records can contain personal identifiers, commercial terms, and project details that third parties could misuse for fraud, competitive intelligence, or further social-engineering attempts.

The information in question

The facts name only “internal files exfiltrated in a ransomware attack.” No itemised list of data types—such as names, addresses, financial account numbers, or employee records—has been disclosed. Exact contents therefore remain unconfirmed.

Companies in steel-building supply and home-improvement retail typically maintain customer contact and project data, employee records, invoices, and proprietary design or pricing material. Until a fuller inventory is published by the organisation or a trusted investigator, it is not possible to state which of those categories, if any, were included in the claimed 150 GB set.

What's at stake

For individuals whose information may have been among the internal files, the primary risks are opportunistic fraud and targeted phishing. Attackers who obtain names, addresses, order histories, or employee details can craft convincing messages that reference real transactions or workplace matters. Financial or identity-related harm is possible if payment or identity documents were present, though that presence is unconfirmed.

For the organisation, the stakes include operational disruption, potential regulatory notification duties under Canadian privacy law, reputational damage with customers and suppliers, and the cost of investigation and remediation. Because the scale of personal data involvement is unknown, the precise compliance and notification burden cannot yet be quantified from public information alone.

What to do if you're exposed

If you have been a customer, employee, or supplier of Future Buildings, treat the situation as a precautionary matter rather than confirmed personal compromise. Practical first steps include:

• Monitor bank and credit-card statements for unfamiliar charges and enable transaction alerts where available.
• Be sceptical of unsolicited calls, emails, or messages that reference steel-building orders, invoices, or employment details; verify through known official channels before responding or clicking links.
• Consider placing a fraud alert or credit freeze with Canadian credit bureaus if you believe sensitive identity data may have been involved.
• Change passwords on any accounts that reused credentials potentially stored in internal systems, and enable multi-factor authentication.
• Run a free exposure scan of your email address against known breach datasets to see whether your information has already appeared in publicly indexed leaks.

Continue to watch for any official statement from Future Buildings that clarifies what was taken and who is affected. Until that information is released, measured vigilance is the most useful response.

AICompiled with AI assistance from public sources and published under our editorial standards.