Aurora Claims Data Theft from FREYWILLE
Summary
The aurora ransomware group claims it stole employee records, trade secrets, legal files and incident documents from Austrian retailer FREYWILLE. The claim is unconfirmed.
Key points
- The ransomware claim names FREYWILLE, an Austrian retailer, as the victim and aurora as the actor.
- The listing claims more than 142 employee files were compromised, including salary, social security, employment, identity and benefits records.
- The actor also claims theft of product costing data, enamel formulations, legal files and records related to a 2018 webshop malware incident.
- The claim was listed on August 11, 2026, and monitored by ransomware.live.
- The article says it cannot confirm the accuracy of the group’s claims.
Article Details
- Victim
- FREYWILLE
- Claim Date
- 2026-08-11
- Encryption Status
- Unknown; the article does not report whether systems were encrypted.
- Exfiltration Status
- aurora allegedly claimed theft of data; the claim is unverified and the article says it cannot confirm its accuracy.
- Exfiltrated Data
- The claim describes employee and identity records, trade secrets including product costing and enamel colour formulations, legal defence files, and documentation related to a 2018 webshop malware attack.
- Exfiltrated Size
- The claim refers to 142+ employee files; no total volume of allegedly exfiltrated data is reported.
- Leak Status
- A public claim is attributed to aurora; the article does not confirm the authenticity of any leaked data.