Back to Victim Disclosures
Benshaw, Inc.
auroraransomware group
Publishes in9d 4h 9m 47s
5h ago
Added Sep 7, 2026
Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll <redacted> <redacted> Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB…) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC…)
Leak Page Screenshot
Organization Details
Organization
Benshaw, Inc.
Leak Data
Publication Due
Sep 17, 2026
Publication Status
Pending
Discovered
Sep 7, 2026
Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/benshaw-inc-a8850418 Site OnlineLast scanned 19m ago
Threat Group
aurora
ransomware group
View full group profile →
Quick Facts
AddedSep 7, 2026