Van Eijck International Car Rescue targeted by Aurora ransomware group

• Ransomware group: Aurora
• Country: Netherlands
• Sector: Transportation
• Announcement date: July 30, 2026

Aurora group claims data breach at Van Eijck International Car Rescue

The Aurora ransomware group has published an announcement on its leak site claiming that it has successfully exfiltrated and leaked data belonging to Van Eijck International Car Rescue. The announcement, which was posted on July 30, 2026, suggests a significant breach of the company's digital infrastructure. While the group claims responsibility for the leak, the specific details regarding the nature of the attack and the method of entry remain unconfirmed.

In the landscape of modern cyber threats, such announcements are a hallmark of ransomware operations. Many groups utilize leak sites to pressure victims into paying ransoms through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information, threatening to release it publicly if their demands are not met. This approach increases the pressure on companies by threatening their reputation and legal standing.

Details of the claimed data leak

The Aurora group has provided specific details regarding the scope of the data they claim to have stolen. According to the announcement, the leaked information consists of approximately 169 GB of data. Although the provided screenshots are blurry and prevent a full clarification of all visual details, the text explicitly identifies several categories of sensitive information that have been compromised. The group claims to have accessed employee home directories, customer contracts, claims data, and backups from Google Workspace.

The specific types of data identified in the claim include:

• Employee salary records
• Tax forms
• Personal documents
• Identity documents
• Driving licenses
• Vehicle registrations
• Damage assessments
• Insurance details
• Gmail data
• Google Drive data
• Google Calendar data

The presence of such a wide array of personal and corporate information highlights the potential impact of the breach. When attackers gain access to cloud environments like Google Workspace, they can often access a vast repository of communication and operational history, which can be used for further malicious activities.

Profile of Van Eijck International Car Rescue

Van Eijck International Car Rescue is a family-owned company that operates within the transportation sector. The organization provides essential towing and roadside assistance services. Its operational footprint is significant, maintaining a large network that includes over 225 vehicles and a workforce of more than 180 employees. The company serves a broad customer base through its operations located in the Netherlands and Spain.

Potential impact and organizational risks

The nature of the data claimed to be leaked by the Aurora group presents several severe risks. For the employees and customers of Van Eijck International Car Rescue, the exposure of identity documents, driving licenses, and personal records creates a high risk of identity theft. Furthermore, the leakage of financial and identity-related data can serve as a catalyst for highly targeted phishing attacks, where criminals use specific personal details to gain the trust of individuals.

From a regulatory perspective, the scope of this data leakage could expose the company to significant legal sanctions under GDPR regulations, given the sensitive nature of the personal information involved. Additionally, the breach may have negative impacts on the company's operational processes. For organizations operating in the transportation and roadside assistance sector, maintaining the integrity of customer and employee data is vital for trust and continuity.

To mitigate such risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication (MFA) across all services, particularly for cloud environments like Google Workspace, and maintaining rigorous backup protocols. Regular security awareness training is also essential to help employees recognize phishing attempts, and strict access controls can limit the amount of data accessible even if a single account is compromised. Monitoring for unusual data exfiltration patterns can also provide early warnings of a potential breach.