Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

AURORA · Threat actor profile

THREAT ACTOR

AURORA_

Dormant

AURORA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of AURORA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

39 Victims tracked
0 / 3 Active mirrors
2026-04-29 First listing
2026-09-07 Most recent

Victims by year

  • 2026 39

Leak site mirrors

3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion Negotiation Chat snapshot · 2026-09-23 01:11
  • pavregldzg2ypbd3gxbil2suxfok7ykmcknwhkli24anpks6lndymyyd.onion 504 Gateway Time-out snapshot · 2026-09-23 00:33
  • exposedrecords.io snapshot · 2026-06-22 16:23

Recent victims

The 50 most recent victims claimed by AURORA. Total in the index: 39.

Date listed Victim Description
2026-09-07 Benshaw, Inc. Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw…
2026-09-07 Jinny Beauty Supply Jinny Beauty Supply is one of the largest Korean-American wholesale be…
2026-09-05 Metrea LLC/Commuter Air Technology, Inc. Metrea LLC (formerly Meta Special Aerospace, LLC) and its subsidiary C…
2026-09-04 EDIF S.p.A. EDIF S.p.A. is an Italian wholesale distributor of electrical equipmen…
2026-09-02 Chip 1 Exchange Chip 1 Exchange — a global independent electronics distributor headqua…
2026-08-31 Ishbia & Gagleard, P.C. Ishbia & Gagleard, P.C. — a boutique law firm in Birmingham, Michigan,…
2026-08-27 SCA Logistik & Fulfillment GmbH SCA is a Bavarian logistics and e-commerce fulfillment provider. The e…
2026-08-26 ERPIS LLC ERPIS LLC (doing business as ShipERP) — a Texas-based SAP integrator w…
2026-08-17 Planungsgruppe M+M AG Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in …
2026-08-17 Natco Home Group Natco Home Group — a fourth-generation, family-owned home furnishings …
2026-08-17 Lloyd Coils Europe 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-h…
2026-08-11 FREYWILLE FREYWILLE — the Austrian luxury fire-enamel jewelry house with 70+ bou…
2026-08-04 US Installation Group, Inc. Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through …
2026-08-04 GILDE Handwerk Macrander GmbH & Co. KG GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittel…
2026-07-30 Van Eijck International Car Rescue Van Eijck International Car Rescue B.V. — a family-owned Dutch towing …
2026-07-30 Evosys Laser GmbH Evosys Laser GmbH — an Erlangen-based industrial laser welding systems…
2026-07-30 Pyramid Analytics B.V. Pyramid Analytics B.V. — a decision-intelligence platform company head…
2026-07-29 Bretford Manufacturing Bretford Manufacturing, Inc. is a privately held manufacturer of charg…
2026-06-30 Primed Halberstadt Medizintechnik Primed Halberstadt Medizintechnik GmbH — a German manufacturer of medi…
2026-06-23 Corporación Primax S.A. Corporación Primax S.A. is Peru's largest fuel distribution company, o…
2026-06-22 Aerospace & Advanced Composites GmbH Aerospace & Advanced Composites GmbH (AAC) — an Austrian space-materia…
2026-06-22 NTP B.V. Civil Engineering Construction NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineeri…
2026-06-22 Kochs GmbH Kochs GmbH — a family-owned German manufacturer of windows, doors, and…
2026-06-22 NationsBuilders Insurance Services NationsBuilders Insurance Services (NBIS) is the premier US underwrite…
2026-06-19 Hagerman & Company Hagerman & Company — a 40-year-old Autodesk Platinum Partner headquart…
2026-06-19 ALS Global ALS Limited (ASX:ALQ) — a global testing, inspection, and certificatio…
2026-06-16 Allan Brothers Fruit Allan Brothers, Inc. — a third-generation, family-owned tree-fruit ope…
2026-06-16 Diamond Truck Centres Diamond Truck Centres — Western Canada's largest International Trucks …
2026-06-16 Sumitomo Electric Bordnetze Sumitomo Electric Bordnetze SE (SEBN) — a Wolfsburg-headquartered subs…
2026-05-12 Avanti Windows & Doors Avanti Windows & Doors — a vinyl window manufacturer headquartered in …
2026-05-12 Startec Group of Companies Startec Group of Companies, a privately held Calgary-based industrial …
2026-05-12 NorthWest Handling Systems NorthWest Handling Systems — a 55-year-old forklift and warehouse equi…
2026-04-29 Costa Solutions, LLC Costa Solutions, LLC — a privately held managed-labor and warehousing …
2026-04-29 Bayou Title, Inc. Bayou Title, Inc. — the largest title insurance agent and closing/sett…
2026-04-29 Advanta Genetics LLC Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxico…
2026-04-29 Baresque Group Baresque Group — a respected commercial-interiors company headquartere…
2026-04-29 Cheval Blanc Randheli Guest Passport Scans — 75,855 Files, 10 Years The single largest data …
2026-04-29 Law Offices of Michael A. Freedman, P.A. (maflaw.com) Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated…
2026-04-29 Atlas Metal Industries Inc Atlas Metal Industries Inc. — a privately held commercial-foodservice-…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.