Sumitomo Electric Bordnetze listed on Aurora ransomware leak site

• Ransomware group: Aurora
• Country: Germany
• Sector: Manufacturing
• Announcement date: June 16, 2026

Aurora claims data breach at Sumitomo Electric Bordnetze

The threat actor known as Aurora has claimed to have exfiltrated a significant volume of data from Sumitomo Electric Bordnetze. According to a listing on the group's leak site on June 16, 2026, the group alleges a major data breach involving the automotive supplier.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive information, threatening to publish it publicly if their demands are not met. This method increases the pressure on companies by threatening their reputation and regulatory standing.

Details of the alleged exfiltration

The Aurora group claims to have exfiltrated a total of 1.1 terabytes of data. This alleged theft reportedly targeted manufacturing sites located in Moldova, Ukraine, Tunisia, and Slovakia. The dataset is said to be comprised of a vast number of files, specifically exceeding 328,000 files, including various formats such as Excel files, PDFs, CAD drawings, and email archives.

The specific types of data allegedly stolen include a wide range of sensitive information:

• HR records
• Payroll
• Tax records
• Passport copies
• Email archives
• Banking information
• Engineering drawings

The variety of these files suggests a broad compromise of both administrative and technical systems within the targeted facilities.

About Sumitomo Electric Bordnetze

Sumitomo Electric Bordnetze (SEBN) is a subsidiary of Sumitomo Electric Industries. The company specializes in the development and manufacture of wiring harness systems and electrical components tailored for the automotive industry. As a global automotive supplier, SEBN maintains numerous production facilities across various countries worldwide, making it a significant entity within the global manufacturing supply chain.

Potential impact and security implications

This alleged data breach carries several significant risks. For the employees and clients of the organization, the exposure of personal data such as passport copies, tax records, and payroll information could facilitate identity theft and targeted phishing attacks. Furthermore, the claim that banking infrastructure data was exfiltrated from the Slovakia site introduces the potential for financial fraud.

Because the organization is headquartered in Germany, such an event may trigger legal sanctions and regulatory processes under the EU General Data Protection Regulation (GDPR). The breadth of the stolen data, which includes engineering drawings and trade secrets, could also impact the organization's operational continuity and competitive standing.

For organizations operating in the manufacturing and automotive sectors, such incidents highlight the critical importance of supply chain security. A breach at a major supplier can have cascading effects throughout the entire production network. To defend against such threats, organizations typically implement defensive measures such as robust network segmentation, strict access controls, regular security awareness training, and comprehensive data encryption to protect sensitive intellectual property and personal information.

Summary of the incident

While public information regarding the Aurora group remains limited, the scale of this alleged exposure demonstrates the evolving complexity of ransomware threats. The combination of technical engineering data and sensitive personal information creates a high-risk environment for both the company and its stakeholders.