Skip to content
Leak-site post naming Rechtsanwaltskanzlei Dr. Bien, captured by ThreatCluster

Rechtsanwaltskanzlei Dr. Bien

aurora

Ransomware leak-site victim intelligence · DE

Data size
1.707 TB
Files
5
Views
4,104
Posted
Oct 12, 2026
Countdown
4 days : 03 hours : 42 min : 55 sec
Country
Germany
Industry
legal services

Summary

Written by ThreatClusterfrom victim profile, leak post

Aurora claims that Rechtsanwaltskanzlei Dr. Bien, a specialist insolvency-law firm in Hamm, NRW, has had data leaked; the post does not disclose the amount or specific data categories. The group states the firm was appointed as insolvency administrator by 12 Amtsgerichte across Westfalen. The leak page states publication status: listed and provides a victim profile indicating sector Legal services – insolvency law, country Germany.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
35
Platforms
WinSolvenz MailStoreContainer-v1 MSSQL beA DATEV
People named
Bernhardt Haelker Daniel

What was taken

Rechtsanwaltskanzlei Dr. Bien — a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.

Data categories
financial dossierstenant dataemail archiveselectronic communications with courtsemployee recordstax and accounting archives
Leak site tags
lawinsolvencysolvencyHammNRWinsolvency administrator
File types seen
doc × 1ptk × 1xml × 2xlsx × 1
Sample files (5)
10000388.C52.1.XML
Aufhebungsvertrag Bernhardt.doc
Kopie von Schuldenregulierungsplan Haelker Daniel.xlsx
0200hbci.ptk
02000001.C52.1.XML

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Data Publishing timer
4 days : 03 hours : 42 min : 55 sec

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture