← All breaches
Threat actor tracker 25 incidents tracked

Aurora — every breach we're tracking

Running log of incidents attributed to or claimed by Aurora in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked25
Latest activityJuly 30, 2026
TypeRansomware / extortion

Groups like Aurora steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high July 30, 2026

Van Eijck International Car Rescue Listed by aurora Ransomware Group

Van Eijck International Car Rescue was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…

high July 30, 2026

Evosys Laser GmbH Listed by aurora Ransomware Group

Evosys Laser GmbH was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…

high July 30, 2026

Pyramid Analytics B.V. Listed by aurora Ransomware Group

Pyramid Analytics B.V. was listed on the aurora ransomware leak site. The group claims to have stolen internal data.…

high July 29, 2026

Bretford Manufacturing Listed by aurora Ransomware Group

Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in…

high June 30, 2026

Primed Halberstadt Medizintechnik Listed by aurora Ransomware Group

[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann …

high June 23, 2026

Corporación Primax S.A. Listed by aurora Ransomware Group

[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Urugu…

high June 22, 2026

Aerospace & Advanced Composites GmbH Listed by aurora Ransomware Group

*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained …

high June 22, 2026

NTP B.V. Civil Engineering Construction Listed by aurora Ransomware Group

[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They …

high June 22, 2026

Kochs GmbH Listed by aurora Ransomware Group

[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordr…

high June 22, 2026

NationsBuilders Insurance Services Listed by aurora Ransomware Group

[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance — a…

high June 19, 2026

Hagerman & Company Listed by aurora Ransomware Group

*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, e…

high June 19, 2026

ALS Global Listed by aurora Ransomware Group

[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ …

high June 16, 2026

Allan Brothers Fruit Listed by aurora Ransomware Group

[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers pack…

high June 16, 2026

Diamond Truck Centres Listed by aurora Ransomware Group

[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue…

high June 16, 2026

Sumitomo Electric Bordnetze Listed by aurora Ransomware Group

[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing a…

high May 12, 2026

Startec Group of Companies Listed by aurora Ransomware Group

Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, inst…

high May 12, 2026

NorthWest Handling Systems Listed by aurora Ransomware Group

[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with br…

high May 12, 2026

Avanti Windows & Doors Listed by aurora Ransomware Group

Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, Califo…

high April 29, 2026

Atlas Metal Industries Inc Listed by aurora Ransomware Group

[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. …

high April 29, 2026

Law Offices of Michael A. Freedman, P.A. (maflaw.com) Listed by aurora Ransomware Group

[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / …

high April 29, 2026

Cheval Blanc Randheli Listed by aurora Ransomware Group

[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 thr…

high April 29, 2026

Bayou Title, Inc. Listed by aurora Ransomware Group

[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-servic…

high April 29, 2026

Advanta Genetics LLC Listed by aurora Ransomware Group

[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed materia…

high April 29, 2026

Costa Solutions, LLC Listed by aurora Ransomware Group

[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M a…

high April 29, 2026

Baresque Group Listed by aurora Ransomware Group

[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and B…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.