Aurora Claims Data Theft from Planungsgruppe M+M AG
Summary
Aurora claims it exfiltrated 268 GB of data from Planungsgruppe M+M AG, including financial, banking, document, email and payroll records. The claim is attributed to the group and remains unconfirmed.
Key points
- The Aurora ransomware group claims it exfiltrated data from Planungsgruppe M+M AG in Switzerland.
- The group’s claim reportedly covers two file servers and DATEV, SFirm, ELO, Outlook PST, and payroll/HR data.
- The claimed dataset totals 268 GB across approximately 124,000 files, spanning 2006–2026.
- The post attributes the claim to Aurora’s leak site and says the information has not been independently confirmed.
Article Details
- Victim
- Planungsgruppe M+M AG
- Victim Domain
- Unknown
- Claim Date
- 2026-08-17
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed by aurora; unverified by the source
- Exfiltrated Data
- The group reportedly claimed to have obtained two file servers (MMBB04, MMBB05), DATEV financial archives, SFirm banking databases, ELO document-management data, Outlook PST email archives, and payroll/HR records. The source says the claim is unverified.
- Exfiltrated Size
- Claimed 268 GB across approximately 124,000 files; unverified
- Ransom Demand
- Unknown
- Leak Status
- A listing was published on aurora's blog; the source says the claim and data authenticity are unverified.
Threat Actors
Products
DATEVtargeted Planungsgruppe M+M AG (CH), exfiltrating data from two file servers (MMBB04, MMBB05) along with DATEV financial archives, SFirm banking databases, the ELO document management system, Outlook PST emailELOfrom two file servers (MMBB04, MMBB05) along with DATEV financial archives, SFirm banking databases, the ELO document management system, Outlook PST email archives, and payroll/HR records.Outlookalong with DATEV financial archives, SFirm banking databases, the ELO document management system, Outlook PST email archives, and payroll/HR records.SFirmAG (CH), exfiltrating data from two file servers (MMBB04, MMBB05) along with DATEV financial archives, SFirm banking databases, the ELO document management system, Outlook PST email archives, and payroll/HR records.