Aurora targeted Pyramid Analytics B.V. in NL, obtaining the complete Pyramid Decision Intelligence Platform source code (including multiple full Git histories) and significant production SQL Server database backups. The stolen data reportedly included user accounts, credentials, and business/customer information from publicly traded companies, impacting NL. #Netherlands
Incident Details
- Victim: Pyramid Analytics B.V.
- Sector: Technology
- Country: NL
- Actor: aurora
- Source: http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/pyramid-analytics-bv-5bc96ed0
- Discovered: 2026-07-30T07:22:25.881643+00:00
- Published: 2026-07-30T00:00:00+00:00
Information
- Pyramid Analytics B.V., a decision-intelligence platform company headquartered in Amsterdam, had been acquired by ServiceNow for hundreds of millions of dollars just four months earlier.
- The complete source code of the Pyramid Decision Intelligence Platform was obtained, including 10+ copies with full Git history showing every feature, algorithm, security module, and integration ever built.
- 22 GB of SQL Server production database backups were obtained, likely containing user accounts, credentials, and business data.
- Customer data from publicly traded companies was also exposed, including Shufersal retail sales data and ABB OLAP cube backups.
Disclaimer: This post is based on public claims made by the ransomware group "aurora". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.