Back to Victim Disclosures

Benshaw, Inc.

auroraransomware group
Published
Sep 7, 2026

Added Sep 7, 2026

Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). Content verification confirms: ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll State tax-portal passwords (CA, FL, MN, SD, UT, VT, Canada GST) in cleartext Excel Concur + ADP passwords in a Word document Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB…) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC…)

Leak Page Screenshot

Organization Details

Organization

Benshaw, Inc.

Country

🇺🇸 US

Industry Sector

Manufacturing

Leak Data

Published

Aug 27, 2026

Publication Status

Published

Discovered

Sep 7, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/benshaw-inc-a8850418
Site OnlineLast scanned 18m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇺🇸 US
SectorManufacturing
AddedSep 7, 2026