Back to Victim Disclosures

Corporación Primax S.A.

auroraransomware groupprimax.com.pe
Published
Jun 23, 2026

Added Jun 23, 2026

Corporación Primax S.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset spans every function of the business: Complete financial reporting — Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals. Employee identity data for 15,000–60,000 individuals — DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents. Live system credentials — Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials. Complete OT network map — IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers. 54 GB of POS transaction data — XML records of consumer fuel purchases across the entire station network. Legal and M&A documentation — Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers.

Leak Page Screenshot

Organization Details

Organization

Corporación Primax S.A.

Domain

primax.com.pe

Country

🇵🇪 PE

primax.com.pe

Leak Data

Data Size

54 GB

Published

Jun 23, 2026

Publication Status

Published

Discovered

Jun 23, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/corporacin-primax-sa-9fd84393
Site OnlineLast scanned 3m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇵🇪 PE
Data Size54 GB
AddedJun 23, 2026