The aurora ransomware group listed Benshaw, Inc. on its data leak site on 2026-09-07. Country: US Sector: Manufacturing Claim as published on the leak site: [manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB…) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC…)