Back to Victim Disclosures

Corporación Primax S.A.

auroraransomware groupprimax.com.pe
Publishes in5d 13h 1m 33s
3h ago

Added Jun 23, 2026

Corporación Primax S.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset spans every function of the business: Complete financial reporting — Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals. Employee identity data for 15,000–60,000 individuals — DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents. Live system credentials — Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials. Complete OT network map — IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers. 54 GB of POS transaction data — XML records of consumer fuel purchases across the entire station network. Legal and M&A documentation — Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers.

Leak Page Screenshot

Organization Details

Organization

Corporación Primax S.A.

Domain

primax.com.pe

Country

🇵🇪 PE

primax.com.pe

Leak Data

Data Size

54 GB

Publication Due

Jun 29, 2026

Publication Status

Pending

Discovered

Jun 23, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/corporacin-primax-sa-9fd84393
Site OnlineLast scanned 12m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇵🇪 PE
Data Size54 GB
AddedJun 23, 2026