Leak-site post naming Corporación Primax S.A., captured by ThreatCluster

Corporación Primax S.A.

aurora

Ransomware leak-site victim intelligence

Posted
Jun 23, 2026
Country
PE
Industry
Not Found

What was taken

[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset spans every function of the business: Complete financial reporting — Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals. Employee identity data for 15,000–60,000

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized white logo on an orange background, resembling a swoosh or checkmark with an "X" integrated into the design.
onion leak page 233 KB