Mimori ransomware group lists data allegedly belonging to Aveva

• Ransomware group: Mimori
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: October 20, 2026

Mimori ransomware group claims data breach at Aveva

The ransomware group known as Mimori has listed a significant dataset on its leak site that allegedly belongs to Aveva. According to the announcement made on October 20, 2026, the group claims to have gained unauthorized access to the organization's systems. This listing follows a common pattern in modern cyberattacks where threat actors use leak sites to pressure victims by threatening to release sensitive information to the public.

The group has claimed that the data theft occurred on the same day the announcement was posted, October 20, 2026. While the group has listed the data, they have not provided any information regarding a ransom demand. The threat actor's announcement indicates that the data was scheduled to be made public on October 23, 2026.

Details of the claimed data leak

The dataset claimed by Mimori is substantial in both volume and file count. The group asserts that the stolen information consists of approximately 1136.6 GiB of data, comprising a total of 177,234 files. Based on the screenshots provided by the group, the file structure contains various technical directory names, including 'ACR', 'APM-Integrated-AML', and 'avevacodedepot'.

The content of the leaked files is described as including various software development, operational management, and engineering files. Specifically, the listing identifies the following types of affected data:

• Engineering data
• Software development files
• Operational management data

About Aveva

AVEVA is a British multinational software company that provides solutions for engineering, design, operations management, and industrial intelligence. Operating as part of Schneider Electric, the company develops technologies that focus on digital transformation and operational efficiency. Their solutions serve a wide range of sectors, including energy, manufacturing, mining, and infrastructure.

Analysis and potential impact

Given that Aveva provides industrial software solutions, this incident may pose risks to critical infrastructure projects and intellectual property. The potential publication of this data could lead to negative impacts on the organization's global operations and its clients. Furthermore, as a UK-based entity, a potential data breach may trigger legal proceedings under UK GDPR.

Information regarding the Mimori group remains limited. However, such leaks may lead to secondary risks, such as targeted phishing attacks and supply chain vulnerabilities. The organization's position in the industrial software sector may be considered a factor that could increase the severity of the incident.

In the context of ransomware, groups often employ a