Ransomware Victim: ALS Global (aurora)

Fecha
19 Jun 2026
Actor
aurora
Tipo
Ransomware
Pais
United States
Sector
Medical
Confianza
high
60
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

0IOCs
0TTPs
auroraActor
United StatesPais
Executive Summary
Victima de ransomware reportada en el dashboard de aurora.

Key Points

  • Ransomware Dashboard
  • Fuente original

ALS Global

Victima de ransomware reportada en el dashboard de aurora.

CampoValor
Grupoaurora
PaisAU
SectorBusiness Services
Fecha2026-06-19T09:52:18.247753+00:00

Detalles

[certification, inspection] ALS Limited (ASX:ALQ) β€” a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ employees, and operations in 65+ countries β€” identified unauthorised access to its IT systems. ~400–500 employee home directories β€” personal documents, cached credentials, email settings, family photos, personal finance files for employees from Australia to Peru to Sweden to Romania. The company's 1Password team vault emergency recovery kit β€” a single 45 KB PDF that enables total recovery of every shared credential in ALS's enterprise password vault. 291 plaintext password files including administrator credentials, FTP passwords, portal passwords, and the document control system master password. 1,018 passport and identity document scans β€” Swedish passports, Mexican passports, Australian passports β€” each one a 10-year identity-theft enabler. 601 bank account detail files including IBAN, SWIFT routing codes, BSB numbers, and sort codes for employees across 15+ countries, plus Russian-language SWIFT salary payment files. 1,986 salary, payroll, and compensation files β€” named individuals, exact amounts, pay scales, negotiation records across AU, US, EU, UK, CA, BR, SE, RO. 453 medical, drug test, and workplace injury records β€” GDPR Art. 9 special category data. 57 complete Outlook email archives (PST files) β€” years of correspondence, attachments, privileged communications. 7,327 client laboratory results β€” mining assay data, certificates of analysis, and geochemistry results held under NDA. 20 GB of proprietary analytical method development β€” ALS's core competitive IP: PFAS, dioxin, acrylamide, glyphosate LC-MS/GC-MS method packages representing years and millions of AUD in R&D. For a TIC company, analytical methods are the product. 7.2 GB of Internal Research reports β€” 68+ formal research reports (IR153–IR287+) spanning 15 years, including IsaMill grinding R&D, GlyLeach joint-venture process IP (with mutual NDA), flotation, minera

Referencias

Diamond Model

Adversary
aurora
Ver perfil →
Victim
Ransomware Victim: ALS Global (aurora)
United States
Capability
Ransomware
Filtracion: 45 KB
Infrastructure
Sin infraestructura confirmada

Referencias y enlaces

→ Perfil del actor aurora en el blog → Ver aurora en IntelTracker → URL IntelTracker: u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion → Fuente OSINT: u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion → Buscar aurora en APTTrail → Repositorio APTTrail → Mas incidentes en United States → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes