Home Search Engine Data Leaks Pricing
API & MCP API documentation MCP
Affiliates Contact Blog Crawler Login Register
Ransomware Leak aurora

Bayou Title, Inc.

Data leak attributed to aurora, first discovered on 2026-04-29. Approximately 65,373 records were reported exposed.

Threat group
aurora
Records exposed
65,373
Discovered
2026-04-29
Country
US
Indexed
2026-10-17
Website
bayoutitle.com
Source ID
28480

About this leak

[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-service locations statewide. The exfiltrated data spans 20+ years of operations (2004–2026) and includes: 70,000–100,000+ Social Security numbers paired with names, addresses, and sale proceeds from 1099-S real-estate closing worksheets covering all 19 offices across three tax years (2018–2020), plus W-2 and 1099-MISC filings. Complete employee payroll databases — 10+ instances of Sage 50 EMPLOYEE.DAT files containing SSNs, bank account numbers, routing numbers, pay rates, tax withholding, and direct deposit details for current and former employees. 103 GB of title abstracts — ~34,000+ PDFs documenting ownership chains, liens, and mortgages for properties across Louisiana. 44 GB of GreenFolders DMS transaction packages (2012, 2013, 2019) — complete closing file archives containing HUD-1 settlement statements, identity verification documents, SSN cards, and tax records. Filenames contain encoded tags (ssn, hud, soc, tax). Plaintext credentials for government portals — a file literally named Lafayette Assessors lcmenard Password4321.url, plus a PDF containing Orleans Parish system login credentials. Attorney-client privileged documents — wills, attorney engagement letters, and legal opinions prepared by licensed Louisiana attorneys.

What is inside this leak sample

Indexed records
65,373
With email
•••
ID documents
•••
File types
•••
Corporate vs personal email
75.04% corporate · 24.96% personal
Top corporate email domains
% of corporate emails
bayoutitle.com 47.77%
bellsouth.net 5.58%
6 more hidden · Enterprise
File types present
csv •••
xls •••
More hidden · Enterprise
Countries · identity documents
· 59.18% US · 32.65%
2 more hidden · Enterprise
Analysed 2026-10-17
Worried your information is in this or another leak? Run a free, anonymous search across millions of ransomware and stealer log records.

Get new leak alerts

New ransomware leaks, stealer dumps and platform updates — straight to your inbox.

We never share your email. Unsubscribe anytime.