Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Kochs GmbH

kochs.de

Kochs GmbH was listed on the Aurora leak site on Jun 22, 2026. Information as of Oct 19, 2026.

Country: GermanyIndustry: Manufacturing
Updated continuously · figures as of Oct 19, 2026
Claimed by
Aurora
First listed
Jun 22, 2026
Claims recorded
1

Leak-Site Claim.

AuroraConfirmed claim
Posted on the leak site
Jun 22, 2026
Collected by Brandefense
Jun 22, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Kochs GmbH, a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material includes: 22 GB of payroll database backups (7 MSSQL.bak files, 2016-2023), every employee's salary, bank IBAN, tax class, social insurance number, pension contributions, and wage garnishments. 2.3 GB of DATEV payroll records (through May 2026), individual named salary documents, garnishment data, company car records for all three entities. 7 Active Directory…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
Adams Warehouse & Delivery, Inc.AuroraUSUnited StatesTransportation and LogisticsNot stated
Estrategias BigMat S.L.U.AuroraESSpainRetailNot stated
The Buckner Company, Inc.AuroraUSUnited StatesEducation and ResearchNot stated
Rechtsanwaltskanzlei Dr. Bien
bien-rechtsanwaelte.de
AuroraDEGermanyLegal ServicesNot stated
Infomedia A/SAuroraINIndiaTechnologyNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
SMIC US Company (Sunnyvale, CA, US arm of Semiconductor Manufacturing International Corpo...
smics.com
N0nCNChinaManufacturingNot stated
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated
ECO USA
ecousaind.com
N0nUSUnited StatesManufacturingNot stated
Rheem Global
rheem.com
HelixUSUnited StatesManufacturing2.45 GB

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.