Back to Victim Disclosures

GILDE Handwerk Macrander GmbH & Co. KG

auroraransomware groupgildehandwerk.com
Published
Aug 4, 2026

Added Aug 4, 2026

GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittelstand group headquartered in Bocholt, Nordrhein-Westfalen. The GILDE Gruppe operates across wholesale trade in gifts, home accessories, and furniture through brands including GILDE Handwerk, Fink Living, and HAKU Möbel, with 50+ legal entities spanning Germany, Austria, the Netherlands, France, the UK, and Hong Kong. The exposed material includes: Complete EBICS/HBCI banking infrastructure — cryptographic keys, DER-encoded certificates, and authentication stores for every group bank account at Sparkasse, Volksbank, Commerzbank, BNP Paribas, Bank Austria, Credit Suisse, Helaba, Postbank, and Multivia. These keys authorise electronic payment transactions. 148+ personal ID document scans — Personalausweise (national ID cards), Reispässe (passports), Führerscheine (driver's licences), and Heiratsurkunden (marriage certificates) for employees, directors, and family members. Names range from warehouse staff to the CEO. ELSTER tax certificates for 50+ entities — the digital keys for filing tax returns with the German Finanzamt, plus personal certificates for directors and family members. Enables fraudulent VAT returns and income tax filings. 100+ plaintext credential documents — banking portal passwords, marketplace logins (Amazon, eBay, Otto, Wayfair), payment processor credentials (Telecash, Concardis, PayPal), ERP system access, and government portal credentials, all stored as unencrypted Word and PDF files. Full employee payroll records (2006–2025) — tax IDs (Steuer-IDs), social security numbers, bank accounts, salary details, sick notes (Krankmeldungen), and disciplinary records for an estimated 200–400 current and 200–500 former employees across all entities. 20 years of consolidated financial records — balance sheets, P&L statements, bank reconciliations, loan documentation, shareholder agreements, and capital contribution records for the entire group from 2004 to 2025. 1,800+ Access databases —

Leak Page Screenshot

Organization Details

Organization

GILDE Handwerk Macrander GmbH & Co. KG

Domain

gildehandwerk.com

Country

🇩🇪 DE

Industry Sector

Manufacturing

gildehandwerk.com

Leak Data

Published

Aug 4, 2026

Publication Status

Published

Discovered

Aug 4, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/gilde-handwerk-macrander-gmbh-co-kg-bc41d805
Site OnlineLast scanned 16m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇩🇪 DE
SectorManufacturing
AddedAug 4, 2026