Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Ernesto Malvestiti S.p.A.

Ernesto Malvestiti S.p.A. was listed on the Aurora leak site on Oct 26, 2026. Information as of Oct 29, 2026.

Country: ItalyIndustry: Manufacturing
Updated continuously · figures as of Oct 29, 2026
Claimed by
Aurora
First listed
Oct 26, 2026
Claims recorded
1

Leak-Site Claim.

AuroraConfirmed claim
Posted on the leak site
Oct 26, 2026
Collected by Brandefense
Oct 26, 2026
Data claimed
Not stated
Leak-site post text, written by the group
[manufacturer] Ernesto Malvestiti S.p.A., a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM. The exposed material spans the company's entire operations: PAGHENET payroll database (1.1 GB SQL Server backup ×7 copies), every employee's salary, IBAN bank account, codice fiscale (Italian tax ID), home address, and tax withholdings. Plus the INAZMST employee master database (181 MB ×5). GDPR Article 9 special-category data, medical fitness records…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
EWM Group
ewm-group.com
AuroraDEGermanyManufacturingNot stated
Meleghy Automotive & Cie. GmbHAuroraDEGermanyManufacturingNot stated
GreenbergFarrow
greenbergfarrow.com
AuroraUSUnited StatesConsultingNot stated
ARX Group SAAuroraCHSwitzerlandEducation and ResearchNot stated
Allmand-Smith LimitedAuroraGBUnited KingdomManufacturingNot stated
Duarte Nursery, Inc.
duartenursery.com
AuroraUSUnited StatesAgricultureNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Fortrex
fortrex.com
WallstreetUSUnited StatesManufacturingNot stated
Hauhinco
hauhinco.com
PayloadDEGermanyManufacturing101 GB
EWM Group
ewm-group.com
AuroraDEGermanyManufacturingNot stated
Meleghy Automotive & Cie. GmbHAuroraDEGermanyManufacturingNot stated
Bi Link
bi-link.com
The GentlemenUSUnited StatesManufacturingNot stated
TWICE SRL
twicestudiobijoux.com
EmperadorITItalyManufacturing560 MB

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 29, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.