Skip to content
Leak-site post naming The Buckner Company, Inc., captured by ThreatCluster

The Buckner Company, Inc.

aurora

Ransomware leak-site victim intelligence · EN

Data size
1.707 TB
Views
3,459
Posted
Oct 13, 2026
Countdown
Data Publishing 5 days : 03 hours : 43 min : 30 sec
Country
United States
Industry
insurance

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Aurora states that it exfiltrated a broad set of records from The Buckner Company, Inc., including HR/payroll data, tax documents, recruitment data, M&A pipeline data, Outlook email archives, and the Epic.mdf database, comprising 316 PDF files and 128 PST files. The Buckner Company, Inc. is described as a Salt Lake City–based commercial property and casualty insurance broker with a second office in Denver, Colorado. The leak post is published, with a data-publishing countdown shown as 5 days, 03 hours, 43 min, 30 sec.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
buckner.com
Platforms
Applied Epic (Epic.mdf) Chrome Edge
People named
kbennett

What was taken

The Buckner Company, Inc. is a commercial property & casualty insurance brokerage headquartered in Salt Lake City, Utah, with a second office in Denver, Colorado.

Data categories
plaintext credentialsSSNsW-2 reports1099-NEC reportsTotal Compensation PDFsPaycom payroll rate historyM&A acquisition pipeline dataOutlook PST email archivesCorporate tax returnsdriver license scansEpic.mdf database
Leak site tags
BucknerBuckner Company
File types seen
pdf × 316pst × 128

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Data Publishing
5 days : 03 hours : 43 min : 30 sec

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring an orange tree with roots and the word "Buckner" in blue text.
onion leak page5.9 KB