Andrade Gutierrez

Andrade Gutierrez, also known as AG Corporation, is a Brazilian‑headquartered multinational conglomerate. The company’s primary activities centre on engineering and construction services for large‑scale infrastructure projects. It operates in domestic and international markets, providing solutions for sectors such as transportation, energy and public works. Its headquarters are located in Brazil, from where it coordinates a global network of offices and project sites. According to the disclosed breach information, the organisation employs more than ten thousand personnel worldwide. This workforce supports its ability to undertake complex, multi‑disciplinary ventures across different geographic regions.

The firm is recognised for its involvement in high‑profile infrastructure works, including ports, airports and venues built for international sporting events. Sensitive blueprints for such projects were among the data exfiltrated in the September 2022 cyber attack, indicating the depth of its design and planning capabilities. Beyond its technical expertise, Andrade Gutierrez has previously resolved corruption allegations linked to a major Brazilian scandal, settling the associated charges. The 2022 breach, carried out by the Dark Angels hacking group, exploited an unpatched server to obtain municipal and state tax authority credentials hidden within employee emails. Attackers accessed approximately three terabytes of corporate and employee data, encompassing personal identifiers, financial information, health records and proprietary project documents. Despite the availability of evidence to the press, the company declined to issue a public comment on the incident at the time.