Diamond Truck Centres Listed by aurora Ransomware Group

On June 16, 2026, Diamond Truck Centres appeared on the leak site of the Aurora ransomware group. The Canadian dealership group, Western Canada’s largest International Trucks dealer with nine main locations and 13 sub-dealers, had its entire shared-drive contents exfiltrated. The data covers 17 years of operations from 2009 through 2026 and includes HR records, payroll, accounting files, military contracts, and individual employee profiles.

Confirmed Details of the Breach

Public reporting indicates the attackers posted proof of the compromise on their leak site, accessible via an onion address. The exposed material contains 53 customer Pre-Authorized Debit forms that list full bank account numbers, transit numbers, institution numbers, and authorized signatures. Among the commercial customers affected is the City of Saskatoon. The dataset represents the full shared-drive contents of the company, which employs roughly 250 people and generates approximately $63 million in annual revenue.

Available reporting describes the breach as a classic ransomware incident: initial access, data exfiltration, and subsequent extortion pressure through public exposure. No confirmed victim count for individual employees or customers has been released, but the breadth of the material suggests hundreds of people could have personal information now circulating in criminal circles.

Why This Matters for You and Your Family

When a company you do business with loses control of your banking details, the risk does not stay inside their walls. Full bank account and transit numbers combined with signatures can be used to attempt unauthorized withdrawals or to build synthetic identities. Payroll and HR files often contain Social Insurance Numbers, home addresses, dates of birth, and direct-deposit information — exactly the pieces criminals need to open new accounts in your name or file fraudulent tax returns.

Even if you never bought a truck from Diamond Truck Centres, family members or employers who did business with them may now be indirectly exposed. Military contracts in the dataset raise additional concerns for anyone whose service records or veteran benefits appear in the same shared environment. Once this volume of structured personal and financial data escapes, it rarely stays private for long.

The Doxxing and Identity-Chain Risks

A single breach like this rarely stops at the original victim. Criminals routinely cross-reference stolen employee or customer records against other leaks to map connections between work emails, personal phone numbers, family addresses, and online handles. These identity chains let attackers move from one compromised account to another, escalating from financial fraud to full doxxing.

Credential leaks cascade quickly into gaming accounts, especially for children who reuse simplified passwords or email addresses tied to a parent’s breached data. A teenager’s Roblox or Fortnite login can become the entry point for harassment once an attacker links the gamer tag back to a real name and home address found in the Diamond Truck Centres files.

Aurora Ransomware Group’s Known Track Record

Public reporting attributes the attack to the Aurora ransomware group. The group emerged in late 2024 and has targeted mid-sized organizations across North America and Europe. Notable prior victims include manufacturing firms, regional healthcare providers, and logistics companies. Their typical playbook involves gaining initial access through phishing or exploited remote desktop credentials, exfiltrating data before encryption, and then pressuring victims with both encryption demands and threats to publish sensitive files on their leak site. Extortion often includes countdown timers and sample document releases to demonstrate seriousness.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the Diamond Truck Centres exposure.
• Rotate any password you ever used at Diamond Truck Centres or related vendor portals, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 15.4 billion breach records and more than 100 platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts commonly targeted after parental data leaks.
• Let remediation specialists handle takedown requests for any exposed documents or broker listings tied to your family so you do not have to chase them yourself.

The incident shows how quickly corporate data leaks become personal threats that follow you and your family for years. Starting with a clear picture of your exposure and maintaining ongoing visibility is the most practical defense. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts — exactly the layered approach needed when credential leaks turn into doxxing chains.