About
Written by ThreatCluster from 2 storiesaurora is a ransomware group operating under an extortion model that threatens to leak stolen data, and it has demonstrated notable tradecraft such as leveraging SpaceX's Cursor AI tool to facilitate credential theft and other malicious activity. ThreatCluster has recorded about two dozen victims attributed to aurora, with hits across Manufacturing, Professional Services, Retail & E-Commerce, Business Services, and Technology, and the countries most affected are Germany, the United States, the Netherlands, Austria, and Peru. Recent reporting shows a pattern of using AI-enabled tools to breach targets and steal credentials, as illustrated by Aur0ra's use of SpaceX's Cursor AI tool to breach at least seven firms between April 8 and May 21, 2026.
Sectors: manufacturing, Manufacturing, legal services · Countries: US, DE, NL
Recent victims
View all →| Victim | Sector | Country | Data | Files | Views | Posted | Status |
|---|---|---|---|---|---|---|---|
| POWERsonic Industries Inc. | Manufacturing | Canada | 1.707 TB | — | — | Oct 19, 2026 | listed |
| Adams Warehouse & Delivery, Inc. adamsdist.com | logistics | United States | 1.707 TB | 7 | 1,020 | Oct 16, 2026 | listed |
| Estrategias BigMat S.L.U. bigmatlaplataforma.es | building materials distribution | Spain | 1.707 TB | 7 | 4,500 | Oct 14, 2026 | listed |
| The Buckner Company, Inc. | insurance | United States | 1.707 TB | — | 3,459 | Oct 13, 2026 | listed |
| Rechtsanwaltskanzlei Dr. Bien sbrechtsanwaelte.de | legal services | Germany | 1.707 TB | 5 | 4,104 | Oct 12, 2026 | listed |
| Infomedia A/S retriever.dk | media monitoring | Denmark | 1.707 TB | 4 | 11,009 | Oct 5, 2026 | listed |
| Thomas Y. Pickett & Co., Inc. typco.com | consulting | United States | 1.707 TB | 6 | 11,119 | Oct 5, 2026 | listed |
| Laboratorios Roemmers SAICF roemmers.com.ar | pharmaceuticals | Argentina | 1.707 TB | 5 | 15,549 | Oct 1, 2026 | listed |
| Buford-Thompson Company, LTD btcbuilds.com | construction | United States | 1.707 TB | 6 | 6,106 | Jan 1, 2024 | listed |
| Jinny Beauty Supply jinny.com | Wholesale beauty distribution | United States | 3.6 GB | 7 | 13,237 | Sep 7, 2026 | published |
| Benshaw, Inc. benshaw.com | manufacturing | United States | 1.707 TB | 8 | 35,938 | Sep 7, 2026 | listed |
| Metrea LLC/Commuter Air Technology, Inc. aur0rablog.io | defense/aerospace | United States | 1.707 TB | 64,000 | 20,195 | Sep 5, 2026 | listed |
| EDIF S.p.A. gruppoedif.it | wholesale distribution | Italy | 1.707 TB | 4 | 39,359 | Sep 4, 2026 | listed |
| Chip 1 Exchange chip1.com | electronics distribution | Germany | 1.707 TB | 7 | 35,167 | Sep 2, 2026 | listed |
| Ishbia & Gagleard, P.C. iglawfirm.com | legal services | United States | 1.707 TB | 12 | 22,909 | Sep 6, 2026 | listed |
| SCA Logistik & Fulfillment GmbH sca-muc.de | logistics/fulfillment | Germany | 1.707 TB | 7 | 50,336 | Sep 5, 2026 | listed |
| ERPIS LLC | IT services | United States | 1.707 TB | 5 | 50,970 | Aug 26, 2026 | listed |
| Planungsgruppe M+M AG pgmm.com | architecture/engineering | Germany | 1.707 TB | 8 | 62,248 | Aug 17, 2026 | listed |
| Natco Home Group natcohome.com | manufacturing | United States | 1.707 TB | — | 58,524 | Aug 17, 2026 | listed |
| Lloyd Coils Europe 4coilstech.eu | manufacturing | Czech Republic | — | 6 | 32,783 | Aug 17, 2026 | published |
| FREYWILLE shop.freywille.com | jewelry | Austria | 1.707 TB | 5 | 67,201 | Aug 11, 2026 | published |
| GILDE Handwerk Macrander GmbH & Co. KG gildehandwerk.com | Wholesale trade in gifts, home accessories, and furniture | Germany | 1,800+ Access databases — ... spanning the entire commercial operation. | 6 | 73,354 | Aug 4, 2026 | published |
| US Installation Group, Inc. www.us-installations.com | construction/installation | United States | 1.707 TB | 7 | 27,426 | Aug 4, 2026 | listed |
| Van Eijck International Car Rescue www.eijck.com | towing and recovery | Netherlands | 156 GB | 6 | 69,003 | Jul 30, 2026 | listed |
| Evosys Laser GmbH evosys-laser.com | manufacturer | Germany | 326 GB of customer project data | 7 | 78,115 | Jul 30, 2026 | published |
Found by ThreatCluster
52 total from our crawlListed on this group's leak site and not present in the aggregated feeds.
Estratégias BigMat S.L.U.
Oct 18, 2026
Commuter Air Technology, Inc.
Defense contracting
Oct 15, 2026
Sumitomo Electric
Oct 1, 2026
Pyramid Analytics
pyramidanalytics.com · 22 GB · 4 files
Sep 30, 2026
Van Eijck International Car Rescue B.V.
www.eijck.com · Towing and recovery · 6 files
Sep 23, 2026
Sumitomo Electric Bordnetze SE
electric
Sep 23, 2026
SEBN Tunisia - Fejja
· 191 GB + 493 GB shared
Sep 18, 2026
Bretford Manufacturing, Inc.
manufacturer · 7 files
Sep 15, 2026
Primed Halberstadt Medizintechnik GmbH
primed-halberstadt.de · manufacturer · 883 GB · 3 files
Sep 15, 2026
Sumitomo Electric Bordnetze SEBN
electric · 6 files
Sep 14, 2026
SEBN Tunisia — Fejja
· 191 GB + 493 GB shared
Sep 13, 2026
SEBN Tunisia
electric · 191 GB + 493 GB shared
Sep 12, 2026
SEBN Slovakia
electric · 268 GB
Sep 12, 2026
SEBN Moldova
electric · 103 GB
Sep 12, 2026
SEBN Ukraine
electric · 115 GB
Sep 12, 2026
Aerospace & Advanced Composites G
Sep 12, 2026
Lloyd Coils Europe 4 Coils Technology s.r.o.
4coilstech.eu · manufacturing · 6 files
Sep 10, 2026
Metrea LLC
metrea.aero · defense · Approximately 480 GB · 64,000 files
Sep 10, 2026
Startec Group of Companies
startec.ca · industrial · ~665 MB · 8 files
Sep 8, 2026
Lloyd Coils Europe 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe)
4coilstech.eu · HVAC&R manufacturing · 1.707 TB · 6 files
Sep 8, 2026