Ransomware needs a way in. Stolen credentials are the cheapest one.

NationsBuilders Insurance Services Ransomware Attack

Ransomware victimRansomed

auroraGroup

United StatesCountry

Jun 22, 2026Discovered

Overview

View group profile

Industry

Financial Services

Country

United States

Discovered

2 months ago

Attack date

Jun 22, 2026

Confidence

75%

Severity

Medium

Status

Claimed

Threat group

aurora

Total victims

First seen

Apr 2026

Last seen

Aug 2026

Threat level

2.8/10

Aggressiveness7/10

Lethality0/10

Criticality1.3/10

Status breakdown

Negotiating6.1%2

Claimed

this victim

93.9%31

Targeted sectors

Energy & Utilities Financial Services Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Financial Services

Known target sector

Country

United States

Not a listed target country

Other victims

View all (33)

Same group · aurora

SCA Logistik & Fulfillment GmbH
Germany
Claimed
ERPIS LLC
United States
Claimed
Planungsgruppe M+M AG
Switzerland
Claimed
Lloyd Coils Europe
United Kingdom
Claimed
Natco Home Group
United States
Claimed
FREYWILLE
Austria
Claimed

Group activity

Monthly attacks · aurora

total · avg 6.6/mo