Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotAurora claims six files were taken from 4 Coils Technology s.r.o. (Lloyd Coils Europe), a Czech-headquartered HVAC&R manufacturer. Sample filenames published include KEY portal.4coilstech.eu.key, KEY vpn.leelcoils.eu.key, CONFIG ATM_user_app.exe.config, CS clsCrypt.cs, CS clsCalculation.cs, and TXT Management Karty - pristupy.txt. The leak page identifies the victim as 4 Coils Technology s.r.o., domain 4coilstech.eu, with offices in Germany, France, and the United Kingdom. The leak post is published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Employees
- 200
- Domains
- 4coilstech.eu 4coilstech.eu sapurnale.io
What was taken
Lloyd Coils Europe 4 Coils Technology s.r.o. (trading as Lloyd Coils Europe) is a Czech-headquartered manufacturer of custom heat exchangers for the HVAC&R industry, with offices in Germany, France, and the United Kingdom. They serve 200+ OEM customers across 39 countries — names like Carrier, Daikin, Trane, Systemair, Remak, GEA, Swegon, and VTS.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Address
- 4 COILS TECH s.r.o., Vrážská 143, 153 00 Prague 5 – Radotín Czech Republic
- Offices
- Germany, France, and the United Kingdom
- Server Link 1
- http://fofss3tzlhqgr3zpitf4ucbjlyj6ia6czuyjxqweo6o5c7iwwd5vdoad.onion/data/HEATCRAFT
- Server Link 2
- https://sapurnale.io/data/HEATCRAFT
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.