Back to Victim Disclosures

Corporación Primax S.A.

auroraransomware groupprimax.com.pe
Published
Jun 23, 2026

Added Jun 23, 2026

Corporación Primax S.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset spans every function of the business: Complete financial reporting — Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals. Employee identity data for 15,000–60,000 individuals — DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents. Live system credentials — Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials. Complete OT network map — IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers. 54 GB of POS transaction data — XML records of consumer fuel purchases across the entire station network. Legal and M&A documentation — Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers.

Leak Page Screenshot

Evidence & lifecycle

Traceable collection and validation history for this disclosure.

First seen Jun 23, 2026

Lifecycle

  1. Published

    Corroborated sources

  2. Detected

    Corroborated sources

  3. Verified

    Corroborated sources

  4. Screenshot captured

    Own collection

Corroboration

External intelligence Jun 23, 2026Own collection Jun 23, 2026External intelligence Jun 23, 2026
Screenshots
1
Aliases
0

Organization Details

Organization

Corporación Primax S.A.

Domain

primax.com.pe

Country

🇵🇪 PE

Industry Sector

Retail & E-Commerce

primax.com.pe

Leak Data

Data Size

54 GB

Published

Jun 23, 2026

Publication Status

Published

Discovered

Jun 23, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/corporacin-primax-sa-9fd84393
Site OnlineLast scanned 4m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇵🇪 PE
SectorRetail & E-Commerce
Data Size54 GB
AddedJun 23, 2026