Diamond Truck Centres Listed by Aurora Ransomware Group

On June 16, 2026, Diamond Truck Centres appeared on the leak site of the Aurora ransomware group. The Canadian dealership group, Western Canada’s largest International Trucks dealer with nine main locations and 13 sub-dealers, had its entire shared-drive contents exfiltrated. The data covers 17 years of operations from 2009 through 2026 and includes HR records, payroll, accounting files, military contracts, and individual employee profiles.

Reported Details of the Breach

Public reporting indicates the attackers posted proof of the compromise on their leak site, accessible via an onion address. The exposed material contains 53 customer Pre-Authorized Debit forms that list full bank account numbers, transit numbers, institution numbers, and authorized signatures. Among the commercial customers affected is the City of Saskatoon. The dataset represents the full shared-drive contents of the company, which employs roughly 250 people and generates approximately $63 million in annual revenue.

Available reporting describes the breach as a classic ransomware incident: initial access, data exfiltration, and subsequent extortion pressure through public exposure. No confirmed victim count for individual employees or customers has been released, but the breadth of the material suggests hundreds of people could have personal information now circulating in criminal circles.

Why This Matters for You and Your Family

When a company you do business with loses control of your banking details, the risk does not stay inside their walls. Full bank account and transit numbers combined with signatures can be used to attempt unauthorized withdrawals or to build synthetic identities. Payroll and HR files often contain Social Insurance Numbers, home addresses, dates of birth, and direct-deposit information — exactly the pieces criminals need to open new accounts in your name or file fraudulent tax returns.