INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Aurora Publishes New Victim Adams Warehouse & Delivery Inc

| 2026-10-16 09:55 CRITICAL LOW RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
On October 16, 2026, a ransomware attack was launched against Adams Warehouse & Delivery, Inc., a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976. The attackers targeted the company's Sage/Peachtree accounting system for 8 entities spanning FY2007–FY2025+, capturing payroll, AR, AP, general ledger, and W-2 filing histories of 52-72 Social Security Numbers across 4 entities. The attack involved exfiltration tactics, utilizing software version Hydraq, which was used to access the company's server backup mirrors from multiple drives, including D:, E:, Data, Network Shares. The attackers also obtained plaintext VPN credentials, WiFi passwords, and 18 database connections with blank passwords. As a result of the attack, 100 warehouse customers were affected, including Honeywell, Hospira, Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB). The current status is unclear as no further information has been provided on whether the attackers have demanded a ransom or if any of the stolen data has been released publicly.
Technical Mitigations AI-generated
• Patch Sage/Peachtree accounting system for 8 entities to prevent exploitation of vulnerabilities in FY2007–FY2025+ versions. • Update RDP files and plaintext VPN credentials with strong, unique passwords to mitigate password cracking attacks. • Implement a custom patch or update for the WDS source code (VB6/.NET) to address potential vulnerabilities.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
HydraqHydraq
Target & Sectors
Global Scope logisticslogistics healthhealth
Incident Timeline
‎2026/10/16
Aurora has published Adams Warehouse & Delivery, Inc. as a new victim on its platform.
infrastructure 1.5
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Data, Network Shares
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation AR
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation AP
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Social Security Numbers
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation DOB
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation WDS
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Honeywell
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Amway
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Kaiser Medical clinic employee
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation South Main Medical Clinic's
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation SSN
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Outlook PST
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
data_breach 4 RDP files
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
data_breach 18 database connections
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
victims 100 warehouse customers
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
data_breach 1.5 largest GB
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Adams Warehouse & Delivery
🏴‍☠️ Aurora has just published a new victim : Adams Warehouse & Delivery, Inc.. Description: Adams Warehouse & Delivery, Inc. — a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
organisation Adams Warehouse & Delivery, Inc.
🏴‍☠️ Aurora has just published a new victim : Adams Warehouse & Delivery, Inc.. Description: Adams Warehouse & Delivery, Inc. — a family-owned freight and logistics company operating 11 warehouse facilities in the Houston metro area since 1976.
Tactical Metrics
Metrics
infrastructure
‎1.5
Software Version
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
data_breach
4
Rdp Files
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
data_breach
18
Database Connections
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
victims
100
Warehouse Customers
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
data_breach
2
Largest Gb
…Amway, and Kaiser Medical clinic employee data — South Main Medical Clinic's bookkeeping within the Sage system, including physician SSN 11 Outlook PST email archives (largest: 1.5 GB) Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Intelligence Sources
Ransomware Live 2026-10-16