Cybercriminals Claim Theft of 800+ Sensitive Engineering Files from U.S. Utilities Firm Hackers have allegedly stolen over 800 sensitive engineering files from Pickett and Associates, a Florida-based civil engineering and geospatial services firm, and are offering the data for sale on a dark web forum for 6.5 bitcoin (≈$600,000). The compromised files include LiDAR point clouds, orthophotos, transmission corridor maps, design files, and vegetation feature data, reportedly tied to major U.S. utilities. Among the affected clients are Tampa Electric Company, Duke Energy Florida, and American Electric Power, though the full list remains undisclosed. The stolen data—used for infrastructure analysis and risk assessment—includes raw LiDAR files (.las), high-resolution orthophotos (.ecw), MicroStation design files, and detailed transmission line corridor mappings covering bare earth, vegetation, conductors, and substations. Duke Energy confirmed it is investigating the claims, stating its cybersecurity team is taking "necessary actions" to assess the incident. The same threat actor is also selling an internal database from Germany’s Enerparc AG, suggesting a broader focus on critical infrastructure targets. Pickett and Associates has not commented on the breach. The incident underscores growing cyber threats to energy sector supply chains and operational security.