The aurora ransomware group listed EWM Group on its data leak site on 2026-10-28. Country: GB Sector: Other Claim as published on the leak site: [fashion] EWM Group — the parent group behind Bonmarché, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The exposed material includes: 503,878 loyalty programme member records — full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 2000–2026. ~21,000 employee records — salary, National Insurance number (via P11D), bank sort code and account number (WAGESTRANSFER database), home address, emer
EWM Group listed by aurora ransomware group
- Group
- aurora
- Sector
- Other
- Country
- United Kingdom
- First seen
- 28 October 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.