Skip to content
Leak-site post naming Meleghy Automotive & Cie. GmbH, captured by ThreatCluster

Meleghy Automotive & Cie. GmbH

aurora

Ransomware leak-site victim intelligence · DE

Views
7,307
Posted
Oct 28, 2026
Countdown
1 days: 00 hours: 53 min: 20 sec
Country
DE
Industry
automotive

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Aurora states it has taken a broad set of data from Meleghy Automotive & Cie. GmbH, including HR and recruitment records such as passport/visa dossiers, engineering data and CAD/DFM tooling, metrology and plant-layout data, employee contracts, backups and cross-reference databases for PLC/SPS/robot systems, TISAX/IATF audit and corrective-action records, restricted management meeting/WLAN records, and browser profile SQLite databases. The leak page shows a countdown for data publishing: 1 day, 00 hours, 53 minutes, 20 seconds remaining. Victim: Meleghy Automotive & Cie. GmbH, a Germany-based automotive company (meleghyautomotive.de).

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
meleghyautomotive.de

What was taken

The exposed material includes: Passport/visa/student-admission dossiers; Tesla Model Y/Opal tooling, CAD and DFM tree; Employee contract and HR folders; MEB/BMW NCAR metrology and plant-layout trees; PLC/SPS/robot backups and cross-reference DBs; TISAX/IATF audit and corrective-action records; Restricted management meeting/WLAN record; Browser profile SQLite databases.

Data categories
Passport/visa/student-admission dossiersTesla Model Y/Opal tooling, CAD and DFM treeEmployee contract and HR foldersMEB/BMW NCAR metrology and plant-layout treesPLC/SPS/robot backups and cross-reference DBsTISAX/IATF audit and corrective-action recordsRestricted management meeting/WLAN recordBrowser profile SQLite databases
Leak site tags
HRPassport/visa/student-admission dossiersEmployee contractHR foldersBackupsTCIAX/IATF

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Phone
+49 2739 89570
Address
Dortmunder Str. 23 Wilnsdorf, 57234 , DE
Facebook
https://www.facebook.com/meleghyautomotive
LinkedIn
https://linkedin.com/company/meleghy-automotive
Instagram
https://www.instagram.com/meleghyautomotive/
Data Publishing
1 days: 00 hours: 53 min: 20 sec

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "MELEGHY Automotive" with a stylized letter "C" incorporated into the design.
onion leak page6.1 KB

Negotiation