Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reportingThe group DARK PROJECT claims a sophisticated cyberattack led to a massive data breach, with approximately 1 TB of data leaked and 116,438 files claimed, including personal and financial information. The leak page identifies the victim as ruhrpumpen.com, a manufacturing company based in Mexico with reported revenue of $350 million. The leak post is published (TOX_ID: 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639), and ThreatCluster's news reporting notes this incident is part of a September 7, 2026 wave of ransomware attacks involving multiple groups, including DARK PROJECT, with notable victims such as Jinny Beauty Supply, Zanini, and NFM Lending.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
Alurwalls was attacked, resulting in the theft of approximately 17 GB of confidential data. The stolen information includes banking and other financial documents, client building plans, and other personal data belonging to the company and its partners. Currently, more than 16,000 files are no longer protected by Alurwalls.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- TOX_ID
- 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.