AEC stands for architecture, engineering, and construction. It is an industry sector that works with large, complex project files such as CAD drawings, models, bids, schedules, contracts, and site documentation. Those files often contain sensitive client data, intellectual property, and operational details that attackers can use for extortion or fraud.
In cyber security, AEC matters because its data is valuable and often shared across many partners, subcontractors, and cloud platforms. That wider collaboration increases exposure to phishing, credential theft, ransomware, and data exfiltration. Defenders in AEC environments focus on access control, backup integrity, file segmentation, and monitoring for unusual downloads or mass encryption. When a leak site or extortion claim names an AEC firm, the immediate task is to verify what systems and records were actually affected.