Aurora Claims Theft of Employee and Business Data from Allan Brothers Fruit

Summary

Ransomware.live reports an unconfirmed Aurora claim targeting Allan Brothers Fruit, alleging theft of employee, tax, banking, immigration, production-backup and operational records.

Key points

The post attributes a ransomware claim against Allan Brothers Fruit to Aurora and says the claim appeared on the actor's leak site; the information is unconfirmed.
The post alleges eight server volumes were exposed and 14,228 employee records were taken from ADP Workforce Now.
Allegedly exposed data includes W-2 filings with Social Security numbers and direct-deposit details that could enable fraud.
The claim also describes exposure of H-2A and I-9 employment records, employee badge photos, and OSHA incident logs.
The post alleges theft of an Oracle RMAN backup containing production, grower-settlement, customer-pricing and lot-tracking data.

Article Details

Victim: Allan Brothers Fruit
Claim Date: 2026-06-16
Encryption Status: Unknown; the source does not report whether data was encrypted.
Encrypted Size: Unknown
Exfiltration Status: The aurora ransomware group claimed data was taken; the source says the claim could not be confirmed.
Exfiltrated Data: The group claimed to have taken employee records, W-2 filings, direct-deposit forms, H-2A and I-9 documents, an Oracle RMAN production backup, accounting databases, badge photos, and OSHA incident logs.
Exfiltrated Size: The source reports 1.3 GB of badge photos; it does not state the total amount of data allegedly taken.
Ransom Demand: Not disclosed
Leak Status: A group blog post made the claim, but the source does not confirm that the stolen data itself was published or verify the claim's accuracy.