Cybercriminals Selling 139GB of Stolen US Utility Engineering Data for $585K

Cybercriminal demands $585K for 139GB of stolen utility data from Pickett USA, exposing critical infrastructure vulnerabilities.

By Content Team

Jan 8, 2026

ON THIS PAGE

Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our privacy policy.

A cybercriminal is selling sensitive engineering data allegedly stolen from Tampa-based Pickett USA, demanding $585,000 in cryptocurrency. The 139GB dataset contains operational information from three major utilities: Tampa Electric Company, Duke Energy Florida, and American Electric Power.

Discovered in January 2026, the breach exposed 892 files including LiDAR point cloud data, high-resolution photos, and design files covering active transmission lines and substations. Security experts warn this "Extended Enterprise" attack highlights how utility companies remain vulnerable through their vendors' weaker security controls.

The incident raises serious concerns about critical infrastructure security, as the stolen data could be used for infrastructure analysis and risk assessment by malicious actors.

Source: Industrial Cyber

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo