Aurora Claims Data Theft at Aerospace & Advanced Composites GmbH
Summary
Aurora claims it took extensive data from Aerospace & Advanced Composites GmbH, including engineering records, credentials, HR files and financial data. The monitoring article says the claim is unconfirmed.
Key points
- The record attributes the claim to ransomware actor aurora and links it to the actor’s leak-site post; ransomware.live monitored it.
- Aurora claims the data includes NAS snapshots spanning more than 30 years of operations, including R&D, engineering and accounting records.
- The listing claims to include ESA thermal vacuum test records and polymer-composite formulations.
- The alleged data includes employee and applicant records, passport scans, payroll information and financial documents.
- The listing also claims to include system credentials, browser-stored logins, BitLocker recovery keys and WMI system dumps.
- The monitoring article says it cannot confirm the claims and invites an official statement from the company.
Article Details
- Victim
- Aerospace & Advanced Composites GmbH
- Encryption Status
- Unknown; the article does not report whether systems were encrypted.
- Exfiltration Status
- The ransomware group claims to possess the listed data; this is unverified.
- Exfiltrated Data
- The group claims to have data including NAS snapshots, ESA test records, business and HR files, email backups, credentials, and financial records. The article says it cannot confirm the claim.
- Leak Status
- A ransomware-group post listing the victim and claimed data is referenced; the article does not confirm that data was publicly leaked.