Back to Victim Disclosures

DRIVING SCHOOL SOFTWARE

PrinzEugenransomware group
Published
Jun 28, 2026

Added Jun 28, 2026

The attack beginning in late may has resulted in the mass data exfiltration from AAA, 911 Driving School, Nova Driving School, and hundreds of other driving schools. Multiple javascript based web skimmers we're installed during the attack, which has bolstered our haul to the following core data: - Over 8000 Credit Cards, format: [pan|cvv|exp|holder_name|address|city|state|zip|parent_email|parent_phone|source_ip|captured|page] - Over 16 Million rows of SQL including 6,000,000 rows of student info (Fullz, plaintext passwords, etc) & 10,000,000 rows of billing info. - Rows of over 40,000 staff members (hashed & plaintext credentials). - Hundreds of payment credentials including stripe secrets and paypal passwords. - Stored procedure source code. - And more. After our emails and second chances have been ignored we will now begin the release, only a fraction of credit cards will be released as they are far too valuable to be (fully) released for free.

Leak Page Screenshot

Organization Details

Organization

Driving School Software

Industry Sector

Education

Leak Data

Data Size

21.8 KB

Published

May 21, 2026

Publication Status

Published

Ransom / Auction

39.394 $

Auction Status

deadline

Discovered

Jun 28, 2026

Leak URL
http://prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion/campaigns/16f2daf2-4154-4ef1-bd6d-799d42979997
Site OnlineLast scanned 3h ago

Threat Group

PrinzEugen

ransomware group

View full group profile →

Quick Facts

SectorEducation
Ransom39.394 $
Data Size21.8 KB
AddedJun 28, 2026