Pyramid Analytics B.V. targeted by Aurora ransomware group

• Ransomware group: Aurora
• Country: Netherlands
• Sector: Technology
• Announcement date: July 30, 2026

Aurora claims to have breached Pyramid Analytics B.V.

The threat actor group known as Aurora has listed the Netherlands-based technology company Pyramid Analytics B.V. on its leak site. According to the claims made by the group, the breach involves a significant amount of sensitive information, including the company's proprietary source code and various database backups. This announcement, made on July 30, 2026, suggests a targeted operation aimed at exfiltrating intellectual property and corporate data.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive files to threaten public disclosure. By publishing a victim's name on a dedicated site, the threat actors aim to damage the organization's reputation and create legal or regulatory pressure.

Details of the alleged data exfiltration

The Aurora group claims to have obtained a vast amount of data during the attack. Specifically, the group alleges they have acquired the complete source code for the company's decision intelligence platform, including the full Git history. This level of access is particularly critical as it provides a roadmap of the software's development and potential vulnerabilities.

In addition to the software's architecture, the group claims to be in possession of 22 GB of SQL Server production database backups. The leaked data is reported to include various corporate customer data, and the group has specifically attributed certain data to the companies Shufersal and ABB. The specific contents of the breach, as claimed by the group, include:

• Source code
• User accounts
• Credentials
• Corporate database backups

The group has not provided information regarding a ransom demand, and no information was given regarding the specific file count of the stolen data.

About Pyramid Analytics B.V.

Pyramid Analytics B.V. is a technology company headquartered in the Netherlands. The organization specializes in the development of a decision intelligence platform. Their software solutions are designed to assist enterprise clients with complex data analysis and various business intelligence processes, providing tools necessary for high-level data management and decision-making.

Potential impact and security implications

This incident may pose a significant risk to the intellectual property and the operational security of Pyramid Analytics B.V. The exposure of core source code and Git history could facilitate the exploitation of security vulnerabilities within the platform. Such an event creates a high risk of supply chain attacks, where attackers leverage vulnerabilities in a software provider to target the third-party customers who rely on that software.

Furthermore, the disclosure of customer data increases the risk of identity theft and targeted phishing campaigns directed at the affected companies. Because Pyramid Analytics B.V. is based in the Netherlands, the incident may trigger mandatory data breach notification obligations under the General Data Protection Regulation (GDPR). Organizations in the technology and data analytics sector often face these risks, making robust security measures essential.

To mitigate such risks, organizations typically focus on implementing strong access controls, monitoring for unauthorized data exfiltration, and maintaining rigorous backup integrity. Protecting the software development lifecycle and securing Git repositories are also vital defensive steps to prevent the loss of intellectual property. While information about the Aurora group remains limited, the nature of their claims highlights the evolving threat landscape facing technology providers.