Aurora Claims Data Theft at Van Eijck International Car Rescue
Summary
Aurora claims it stole employee files, rental contracts and customer claims data from Van Eijck International Car Rescue, as well as a Google Workspace backup. The monitoring post says the claims are unconfirmed.
Key points
- The ransomware.live post attributes the claims to Aurora's leak-site listing; the alleged incident is unconfirmed.
- The group claims 227 employee home directories containing personal, tax, salary and financial information were exposed.
- The claim includes 12 GB of RentRunner rental contracts with identity documents, driving licenses and vehicle registrations.
- Aurora also claims to have data from more than 500 customer claims dated 2010–2019.
- The post says a CubeBackup backup covered Gmail, Drive and Calendar for 18 user accounts and 206 groups.
Article Details
- Victim
- Van Eijck International Car Rescue
- Victim Domain
- Not disclosed
- Claim Date
- 2026-07-30
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by the ransomware group; unconfirmed
- Exfiltrated Data
- The group claimed exposure of employee home directories, RentRunner rental contracts with identity documents, customer claims data, and a Google Workspace backup. The source says it cannot confirm the claims.
- Exfiltrated Size
- Claimed: 156 GB of employee home directories and 12 GB of rental contracts. No size stated for the customer claims data or Google Workspace backup.
- Leak Status
- The ransomware group publicly claimed data exposure; the source says the claims are unconfirmed.
Threat Actors
Products
CubeBackupThe attacker also compromised a complete Google Workspace backup (CubeBackup) covering Gmail, Drive, and Calendar for 18 user accounts and 206 groups.Google WorkspaceThe attacker also compromised a complete Google Workspace backup (CubeBackup) covering Gmail, Drive, and Calendar for 18 user accounts and 206 groups.RentRunnerInternational Car Rescue in the Netherlands, exposing 156 GB of employee home directories, 12 GB of RentRunner rental contracts with identity documents, and 10 years of customer claims data (2010–2019) containing