Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotAurora claims Infomedia A/S, a Denmark-based media monitoring company, had about 30 GB of data taken. The data categories claimed include SQL Server credentials, an RSA private key, salary data, and financial data; sample filenames published include server_key.pem, Ammco - Paywall sites and credentials.docx, Server.ini, and da_password.txt. The leak post is published and includes a countdown of 65 days, 07:37:59. Victim profile as stated: Infomedia A/S, domain retriever.dk, Denmark, a media-monitoring company.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Employees
- 0
- Platforms
- SQL Server Opoint CRM database (crmdb.opoint.com) Infomedia Export Data API service
What was taken
Infomedia A/S — Denmark's premier media monitoring company, co-owned by the country's two largest media conglomerates (JP/Politikens Hus and Berlingske Media). Infomedia sits at the heart of Nordic media. It monitors newspapers, broadcasts, and digital sources for hundreds of corporate and government clients — including the EU Parliament, A.P. Møller-Mærsk, and major Nordic media groups (Schibsted, Polaris, NRK, Amedia).
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Phone
- +45 88 77 33 00
- Address
- Pilestræde 58 1112 København K
- https://www.linkedin.com/showcase/10887129/
- Data Publishing
- 55 days
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.