Aurora — every breach we're tracking
Running log of incidents attributed to or claimed by Aurora in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Aurora steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Rapid Manufacturing Listed by Aurora Ransomware Group
Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manu…
CP Manufacturing, Inc. Listed by Aurora Ransomware Group
CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since th…
Meleghy Automotive & Cie. GmbH Listed by Aurora Ransomware Group
The exposed material includes: Passport/visa/student-admission dossiers Tesla Model Y/Opal tooling, CAD and DFM tree Employee contract and H…
EWM Group Listed by Aurora Ransomware Group
EWM Group — the parent group behind Bonmarché, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The …
GreenbergFarrow Listed by Aurora Ransomware Group
GreenbergFarrow — a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles,…
Ernesto Malvestiti S.p.A. Listed by Aurora Ransomware Group
Ernesto Malvestiti S.p.A. — a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW…
ARX Group SA Listed by Aurora Ransomware Group
ARX Group SA — one of Switzerland's premier engineering consultancies, with 25+ offices in 17+ countries, known for iconic projects includin…
Allmand-Smith Limited Listed by Aurora Ransomware Group
Allmand-Smith Limited (trading as Stormguard) — a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Doma…
Duarte Nursery, Inc. Listed by Aurora Ransomware Group
Duarte Nursery, Inc. is a wholesale deciduous fruit and nut tree nursery in Hughson, California — an S Corporation run by brothers John and …
POWERsonic Industries Inc. Listed by Aurora Ransomware Group
POWERsonic Industries Inc. — a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees …
Adams Warehouse & Delivery, Inc. Listed by Aurora Ransomware Group
Adams Warehouse & Delivery, Inc. — a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area …
Estrategias BigMat S.L.U. Listed by Aurora Ransomware Group
Estrategias BigMat S.L.U. — the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building…
The Buckner Company, Inc. Listed by Aurora Ransomware Group
The Buckner Company, Inc. was listed on the Aurora ransomware leak site. The group claims to have stolen internal data.…
Rechtsanwaltskanzlei Dr. Bien Listed by Aurora Ransomware Group
Rechtsanwaltskanzlei Dr. Bien — a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte acro…
Infomedia A/S Listed by Aurora Ransomware Group
Infomedia A/S — Denmark's premier media monitoring company, co-owned by the country's two largest media conglomerates (JP/Politikens Hus and…
Thomas Y. Pickett & Co., Inc. Listed by Aurora Ransomware Group
Thomas Y. Pickett & Co., Inc. — founded in 1926, headquartered in Addison/Dallas, Texas — is one of the oldest property tax appraisal consul…
Laboratorios Roemmers SAICF Listed by Aurora Ransomware Group
Laboratorios Roemmers SAICF — Argentina's #1 pharmaceutical company by revenue, with €1.669 billion in consolidated turnover, 6,890 employee…
Buford-Thompson Company, LTD Listed by Aurora Ransomware Group
Buford-Thompson Company, LTD, a Texas construction general contractor with 30+ years of history building schools for K-12 districts across t…
Jinny Beauty Supply Listed by Aurora Ransomware Group
Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Dor…
Benshaw, Inc. Listed by Aurora Ransomware Group
Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard rec…
Benshaw, Inc. Listed by Aurora Ransomware Group
Benshaw, Inc. was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
Metrea LLC/Commuter Air Technology, Inc. Listed by Aurora Ransomware Group
Metrea LLC (formerly Meta Special Aerospace, LLC) and its subsidiary Commuter Air Technology, Inc. (CAT) are US defense contractors providin…
EDIF S.p.A. Listed by Aurora Ransomware Group
EDIF S.p.A. is an Italian wholesale distributor of electrical equipment, plumbing, and lighting systems. The exposed files include passwords…
EDIF S.p.A. Listed by Aurora Ransomware Group
EDIF S.p.A. was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
Chip 1 Exchange Listed by Aurora Ransomware Group
Chip 1 Exchange — a global independent electronics distributor headquartered in Neu-Isenburg, Germany, with primary US operations in Laguna …
Ishbia & Gagleard, P.C. Listed by Aurora Ransomware Group
Ishbia & Gagleard, P.C. — a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The fir…
Erpis Llc Listed by Aurora Ransomware Group
Erpis Llc was listed on the Aurora ransomware leak site. The group claims to have stolen internal data.…
Lloyd Coils Europe Listed by Aurora Ransomware Group
4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-headquartered manufacturer of custom heat exchangers for the HVAC&R ind…
Planungsgruppe M+M AG Listed by Aurora Ransomware Group
Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Böblingen, Baden-Württemberg, with approximately 432 employees across …
Natco Home Group Listed by Aurora Ransomware Group
Natco Home Group — a fourth-generation, family-owned home furnishings manufacturer headquartered in West Warwick, Rhode Island, with ~800 em…
Freywille Listed by Aurora Ransomware Group
FREYWILLE — the Austrian luxury fire-enamel jewelry house with 70+ boutiques across Europe, the Americas, Middle East, Russia/CIS, and Asia-…
GILDE Handwerk Macrander GmbH & Co. KG Listed by Aurora Ransomware Group
GILDE Handwerk Macrander GmbH & Co. KG was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
US Installation Group, Inc. Listed by Aurora Ransomware Group
Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 install…
Evosys Laser GmbH Listed by Aurora Ransomware Group
Evosys Laser GmbH was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
Van Eijck International Car Rescue Listed by Aurora Ransomware Group
Van Eijck International Car Rescue was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
Pyramid Analytics B.V. Listed by Aurora Ransomware Group
Pyramid Analytics B.V. was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…
Bretford Manufacturing Listed by Aurora Ransomware Group
Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in…
Primed Halberstadt Medizintechnik Listed by Aurora Ransomware Group
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann …
Corporación Primax S.A. Listed by Aurora Ransomware Group
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Urugu…
Aerospace & Advanced Composites GmbH Listed by Aurora Ransomware Group
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained …
NTP B.V. Civil Engineering Construction Listed by Aurora Ransomware Group
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They …
Kochs GmbH Listed by Aurora Ransomware Group
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordr…
NationsBuilders Insurance Services Listed by Aurora Ransomware Group
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance — a…
Hagerman & Company Listed by Aurora Ransomware Group
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, e…
ALS Global Listed by Aurora Ransomware Group
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ …
Allan Brothers Fruit Listed by Aurora Ransomware Group
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers pack…
Diamond Truck Centres Listed by Aurora Ransomware Group
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue…
Sumitomo Electric Bordnetze Listed by Aurora Ransomware Group
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing a…
Avanti Windows & Doors Listed by Aurora Ransomware Group
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, Califo…
Startec Group of Companies Listed by Aurora Ransomware Group
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, inst…
NorthWest Handling Systems Listed by Aurora Ransomware Group
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with br…
Atlas Metal Industries Inc Listed by Aurora Ransomware Group
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. …
Costa Solutions, LLC Listed by Aurora Ransomware Group
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M a…
Baresque Group Listed by Aurora Ransomware Group
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and B…
Cheval Blanc Randheli Listed by Aurora Ransomware Group
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 thr…
Bayou Title, Inc. Listed by Aurora Ransomware Group
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-servic…
Law Offices of Michael A. Freedman, P.A. (maflaw.com) Listed by Aurora Ransomware Group
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / …
Advanta Genetics LLC Listed by Aurora Ransomware Group
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed materia…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free DoxxScan™ scan shows you which breaches exposed your email. Then you pick what fits.