The aurora ransomware group listed Aerospace & Advanced Composites GmbH on its data leak site on 2026-06-22. Country: DE Sector: Manufacturing Domains named: codes.xlsx Claim as published on the leak site: *** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations: aacdata (31 December 2022) — 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups. aacdata1 (14 January 2025) — 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet. BMD_DATA — 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations. done/ — Bitlocker recovery keys for 12 endpoints and WMI system dumps. The exposed material includes: 4 passport scans, 1 social security number, 25 employees' complete HR files, 50–100+ job applicant CVs — the full identity-theft toolkit for the workforce plus third-party data subjects. The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers. 12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops. 123 GB of ESA thermal vacuum test data — 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated