Leak-site post naming Kochs GmbH, captured by ThreatCluster

Kochs GmbH

aurora

Ransomware leak-site victim intelligence · EN

Posted
Jun 22, 2026
Country
DE
Industry
Manufacturing

What was taken

[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material includes: 22 GB of payroll database backups (7 MSSQL .bak files, 2016–2023) — every employee's salary, bank IBAN, tax class, social insurance number, pension contributions, and wage garnishments. 2.3 GB of DATEV payroll records (through May 2026) — individ

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring a stylized letter "K" in a bold red color.
onion leak page 6.9 KB