Incident Details
- Victim: GILDE Handwerk Macrander GmbH & Co. KG
- Sector: Manufacturing
- Country: DE
- Actor: aurora
- Source: http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/gilde-handwerk-macrander-gmbh-co-kg-bc41d805
- Discovered: 2026-08-04T06:21:33.166294+00:00
- Published: 2026-08-04T00:00:00+00:00
Information
- Over 148 personal ID document scans, including national ID cards, passports, driver’s licences, and marriage certificates for employees, directors, and family members.
- ELSTER tax certificates for more than 50 entities, including personal certificates for directors and family members, creating a risk of fraudulent VAT and income tax filings.
- Full employee payroll records covering 2006–2025, with tax IDs, social security numbers, bank accounts, salary details, sick notes, and disciplinary records for current and former staff.
- 20 years of consolidated financial records, including balance sheets, profit and loss statements, bank reconciliations, loan documentation, shareholder agreements, and capital contribution records.
- More than 1,800 Access databases containing inventory valuations, customer lists, supplier terms, product pricing, and order history across the group’s operations.
Disclaimer: This post is based on public claims made by the ransomware group "aurora". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.