Diamond Truck Centres data allegedly listed by Aurora ransomware group

• Ransomware group: Aurora
• Country: Canada
• Sector: Transportation
• Announcement date: June 16, 2026

Aurora claims to have stolen data from Diamond Truck Centres

The threat actor known as Aurora has listed data allegedly belonging to the Canada-based company Diamond Truck Centres on its leak site. This announcement, made on June 16, 2026, follows a claimed attack date of the same day. The listing indicates a significant data breach, though the group has not provided a specific ransom demand.

According to the claims made by the Aurora group, they have successfully accessed and exfiltrated operational data spanning from 2009 to 2026. The threat actor alleges that they have obtained the full contents of the company's shared drives. This includes sensitive directories related to human resources, accounting, and even military contracts. The announcement explicitly states that the dataset contains sensitive information belonging to both the company's employees and its customers.

Ransomware attacks often involve a tactic known as double extortion. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data and threaten to leak it on public forums or dedicated leak sites if a ransom is not paid. This approach increases the pressure on the victim, as the threat of exposing private information can cause lasting reputational and legal damage even if the company can restore its systems from backups.

The alleged data includes sensitive personal and corporate information

The scope of the data claimed by Aurora is extensive, covering nearly two decades of corporate history. The group alleges that the stolen information includes a wide variety of high-value targets that could be used for malicious purposes. The specific items identified in the leak claim include:

• Customer bank account details
• Employee payroll records
• Biometric data
• Immigration documents
• System passwords
• Military contract documentation
• Outlook email archives

The presence of such diverse data types—ranging from financial records to biometric information and system credentials—suggests a deep level of access into the organization's digital infrastructure. When such a breach occurs, organizations typically face the challenge of notifying affected parties and managing the fallout from the exposure of highly personal identifiers.

About Diamond Truck Centres

Diamond Truck Centres is Western Canada's largest International Trucks dealership group. The company provides commercial truck sales, service, and parts support.

Potential risks and organizational implications

The claims made in this leak suggest that both employees and customers could be exposed to significant risks of identity theft and fraud due to the nature of the stolen data. Furthermore, the company may face investigations regarding its data protection obligations under Canada's PIPEDA regulations. The presence of documents related to military contracts could create secondary risks concerning national security processes.

If the data provided by the Aurora group is accurate, the consequences for the organization may include operational disruption and significant reputational loss. For companies operating in the transportation and logistics sector, maintaining the integrity of supply chain data and customer information is critical for trust and regulatory compliance.

To mitigate such risks, organizations generally focus on robust defensive measures. These include implementing multi-factor authentication (MFA) to protect against the use of stolen passwords, maintaining strict access controls to limit the visibility of sensitive shared drives, and conducting regular audits of data access. Additionally, organizations often implement comprehensive encryption for data at rest and in transit to ensure that even if data is exfiltrated, it remains unreadable to unauthorized parties.

• Identity theft protection: Exposure of payroll and biometric data necessitates careful monitoring for fraudulent activity.
• Regulatory compliance: Adherence to regional data protection laws is essential to avoid legal penalties.
• Security posture: Strengthening defenses against unauthorized access to shared drives is a primary defensive goal.