Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotAurora states that 7 files were taken from US Installation Group, Inc., with sample filenames including Aguilar, Derrick J.pdf; 3657120-JobData.xml; SATBudget_202606241001.csv; and JP Morgan Bank Accounts.csv, comprising CSV, PDF, and XML files. The leak page identifies the victim as US Installation Group, Inc., listing its domain www.us-installations.com, United States location, revenue $46,670,694, 200–550 employees, a named individual Bruce DeLuca, and JPMorgan Chase as a platform. The post is published/listed and provides two data links (onion and clearnet) to ESSCORP.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Employees
- 0
- Domains
- https://www.us-installations.com/
- Platforms
- JPMorgan Chase
- People named
- Bruce DeLuca
What was taken
US Installation Group, Inc. has been installing flooring for The Home Depot since 1993. Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 installations annually across 33 markets in 14 states.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- [email protected]
- Server Link 1
- http://fofss3tzlhqgr3zpitf4ucbjlyj6ia6czuyjxqweo6o5c7iwwd5vdoad.onion/data/ESSCORP
- Server Link 2
- https://sapurnale.io/data/ESSCORP
- Files — ESSCORP
- 7 files listed: Aguilar, Derrick J.pdf; Aaron Gutierrez - New.pdf; 3657120-JobData.xml; SATBudget_202606241001.csv; SATBudget_202512241001.csv; QuickBook_FL_NEC_20210128100627.csv; JP Morgan Bank Accounts.csv
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.