Aurora Claims Theft of Thomas Y. Pickett & Co. Data

Summary

The Aurora ransomware group claims it exposed Thomas Y. Pickett & Co. data, including database backups, employee records, source code, client contracts and financial documents. The claims have not been independently confirmed.

Key points

The record attributes the claims to the Aurora ransomware group and says their accuracy could not be confirmed.
The group claims 13 SQL Server backups totaling 127 GB were exposed, including a database with property-owner records and user credentials.
Allegedly exposed material includes HR records for more than 40 employees, such as tax, payroll and medical documents.
The claim also describes an 11 GB Azure DevOps repository, more than 200 client contracts and financial records.
A developer password and an HR manager’s PKCS#12 signing certificate with a private key were reportedly exposed.

Article Details

Victim: Thomas Y. Pickett & Co., Inc.
Claim Date: 2026-10-05
Encryption Status: Unknown; the source does not report whether systems were encrypted.
Exfiltration Status: The ransomware group claims data was exposed and taken; the source says it cannot confirm the claims.
Exfiltrated Data: The group reportedly exposed database backups, HR and financial records, client contracts, source code, and other information. These details are unverified.
Exfiltrated Size: The source reports claims of 13 database backups totaling 127 GB and an 11 GB Azure DevOps repository; it does not establish the total amount exfiltrated.
Ransom Demand: Unknown; no ransom demand is reported.
Leak Status: The group reportedly published a claim and data listing. The source cannot confirm the accuracy or authenticity of the claims or data.