Leak-site post naming Primed Halberstadt Medizintechnik, captured by ThreatCluster

Primed Halberstadt Medizintechnik

aurora

Ransomware leak-site victim intelligence

Posted
Jun 30, 2026
Country
DE
Industry
Healthcare

What was taken

[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four entire server volumes: Daten (883 GB) — File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB) EE (807 GB) — Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), produc

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the word "Primed" in red, accompanied by a stylized graphic element.
onion leak page 6.1 KB