Back to Victim Disclosures

Hagerman & Company

auroraransomware group
Publishes in5d 14h 21m 43s
19h ago

Added Jun 19, 2026

Hagerman & Company — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, energy, defense, healthcare, and education. The exposed dataset includes: Complete proprietary source code for 15+ commercial products including the HNC Licensing System (License Generator, License Server, License Manager) — enabling unlimited piracy of all Hagerman products. 8+ plaintext database credentials in .udl files, including an Oracle SYS (DBA superuser) account with password "Hagerman@1!" reused across multiple systems. Engineering vault databases for 14+ critical infrastructure entities — NYPA (7 power plants including Niagara Falls), Kinder Morgan (Elba Island LNG terminal), HydroOne (Ontario electricity), Phillips 66, Chevron, and 8+ petroleum refineries. Defense/government data — NASA IT Security Requirements, Lockheed Martin configurations, Boeing-SVS vault data, JPL configurations. Azure DevOps transaction logs (1.6 GB) containing complete source code version history and potentially CI/CD deployment secrets. Third-party database credentials for Michigan State University (3 databases), Cal State Long Beach, and Beth Israel Deaconess Medical Center infrastructure.

Leak Page Screenshot

Organization Details

Organization

Hagerman & Company

Industry Sector

Business Services

Leak Data

Data Size

1.6 GB

Publication Due

Jun 26, 2026

Publication Status

Pending

Discovered

Jun 19, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/hagerman-company-7662c20a
Site OnlineLast scanned 5m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

SectorBusiness Services
Data Size1.6 GB
AddedJun 19, 2026