Back to Victim Disclosures

Allmand-Smith Limited

auroraransomware groupblfw.db
Publishes in12d 0h 40m 13s
3h ago

Added Oct 21, 2026

Allmand-Smith Limited (trading as Stormguard) — a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Domain admin credentials in plaintext and a full DC dump — STORMGUARD\MichaelAdmin / 5t0rmGuard Complete NatWest banking infrastructure — blfw.db (21.3 MB live Bankline database with account numbers, sort codes, payee details, and transaction logs), plus WorldPay payment gateway credentials (WorldPay Account Details.xlsx), plus Sage 200 AR/AP containing bank details for every customer and supplier across all 15 entities. NatWest has 3 outstanding registered charges (Jun 2026). Full payroll for every employee, current and former — Payroll.zip (6.1 GB, 1,185 files) from Sage Payroll: NI numbers (lifetime identifiers), tax codes, PAYE history, gross/net pay per period, bank account details for BACS salary payments, pension contributions, P45/P60 records. Complete financial records for 15 entities — Sage 200 databases for Allmand-Smith Ltd, Stormguard Fabrications, Stormguard Sills, Rainwater Systems, Floodplan, Bridgemill, Chelford, Paradise, MJ Associates, SAS Partners, Specialised Aluminium Supplies, two pension funds, plus the consolidated age200_AllmandSmithLtd.bak (2.1 GB). Management accounts (Jan–Jul 2024), nominal trial balances, bank reconciliations (£102,662 cash at year-end). Revenue: £17.66M, profit: £1.01M, financial health: 12/100 (distressed).

Leak Page Screenshot

Organization Details

Organization

Allmand-Smith Limited

Domain

blfw.db

blfw.db

Leak Data

Data Size

21.3 MB

Publication Due

Nov 3, 2026

Publication Status

Pending

Discovered

Oct 21, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/allmand-smith-limited-64870e71
Site OnlineLast scanned 8m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Data Size21.3 MB
AddedOct 21, 2026