Back to Victim Disclosures

Pyramid Analytics B.V.

auroraransomware group
Published
Jul 30, 2026

Added Jul 30, 2026

Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW). 10+ copies of the platform source code with full Git history, revealing every feature, algorithm, security module, and AI integration ever built. A wildcard SSL private key for *.pyramidanalytics.com enabling man-in-the-middle attacks on any subdomain. API keys and service account credentials for Bing Maps, Mapbox, Google Sheets — plus database passwords stored in plaintext. 22 GB of SQL Server production database backups likely containing user accounts, credentials, and business data. Customer data from publicly traded companies — Shufersal (TASE: SAE) retail sales data and ABB (NYSE: ABB) OLAP cube backups. Documented security vulnerabilities with full exploit methodology — OWASP ZAP scan reports and a path-traversal proof targeting a specific Java class and line number. The complete AI integration architecture showing connections to Google Gemini, OpenAI, Azure AI, and IBM Watsonx.

Leak Page Screenshot

Organization Details

Organization

Pyramid Analytics B.V.

Country

🇳🇱 NL

Industry Sector

Technology

Leak Data

Data Size

22 GB

Published

Jul 30, 2026

Publication Status

Published

Discovered

Jul 30, 2026

Leak URL
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/pyramid-analytics-bv-5bc96ed0
Site OnlineLast scanned 11m ago

Threat Group

aurora

ransomware group

View full group profile →

Quick Facts

Country🇳🇱 NL
SectorTechnology
Data Size22 GB
AddedJul 30, 2026