- Gruppe
- Lamashtu
- Erfassungsdatum
- Status
- Online / unverändert
- Land
- Deutschland
Hinweise zur Einordnung
Dieser Eintrag dokumentiert eine Veröffentlichung der Gruppe. Ein Angriff oder Datenabfluss ist damit nicht unabhängig bestätigt.
- Branche: geringe Konfidenz
Konfidenz ist eine heuristische Einschätzung. Prüfzeitpunkte beziehen sich auf die Anreicherung, nicht auf unabhängige Verifikation. Herkunft und Korrekturen finden Sie unter „Firmeninformationen & Datenherkunft“.
Angaben der Ransomware-Gruppe
UnbestätigtQuellentext als öffentliche Metadaten wiedergegeben. Die Aussagen wurden nicht unabhängig geprüft; Links sind ausgeblendet.
Bender GmbH Tribunenbau is a German manufacturer of mobile and permanent grandstands, stages, podiums and temporary structures for events. It designs, rents, sells and services tribunes for stadiums, festivals and concerts.
SUMMARY
We obtained a substantial dataset from a German construction and event infrastructure company. The archive contains tens of thousands of files spanning 2021 through 2026, covering the company's complete financial operations, personnel records, and project documentation. The data originates from a single server and includes payroll records, personnel files, structural engineering documents, project calculations, tender submissions, and correspondence related to major sporting events across Europe.
The dataset exposes the personal and financial details of dozens of named individuals. It also contains extensive documentation of the company's project pricing methodology, structural calculations, and bid submissions for high-profile events including Formula 1 races and Olympic venues.
WHAT WE HAVE
Personal Data
The dataset includes comprehensive personnel files for dozens of employees. We have employment contracts, bank account details, tax identification documents, passport copies, and residence permits. Sick leave certificates and termination letters are present. Employee interview protocols document performance reviews and disciplinary discussions.
Payroll records span multiple years and include monthly salary statements for named individuals. These documents contain full names, addresses, social security numbers, and detailed compensation information.
Financial Records
Bank statements from multiple accounts are included, covering monthly transactions from 2021 through 2026. The dataset contains monthly financial reports (SuSa) for Bender GmbH and Wicon GmbH & Co. KG, providing insight into revenue, costs, and financial positioning across the entire period.
Tax return documentation and correspondence with tax authorities is present. We also found records related to COVID-19 relief fund applications, including supporting documentation submitted to L-Bank.
Intellectual Property
The archive contains over a thousand cost calculation spreadsheets for projects across Europe. These documents reveal the company's pricing methodology, margin structures, and cost estimation processes for temporary grandstand construction.
Structural engineering documents (Statik) are included, with detailed calculations and CAD drawings in .dwg format. These cover load-bearing calculations, material specifications, and assembly plans for various grandstand configurations.
Tender and bid documentation is present for numerous public and private contracts. This includes submitted proposals, pricing breakdowns, and correspondence with potential clients.
Project Documentation
The dataset contains extensive documentation for construction projects at major sporting venues. We have invoices, hotel bookings, logistics coordination, and accreditation records for events including Formula 1 races at Zandvoort and Spa-Francorchamps, the Paris 2024 Olympics, and various German stadiums.
Accreditation packages include photographs and personal details of workers deployed to secure venues.
Legal & Compliance
Employment contracts and termination agreements are present. We found documentation related to business acquisition activities, including checklists and correspondence concerning operational succession.
The full scope of the dataset has been catalogued and indexed.
WHO CAN RECEIVE THIS DATA
Regulators
German data protection authorities can receive notification. The personnel files and payroll records contain sensitive personal data subject to GDPR protections. The presence of passport copies, residence permits, and social security numbers creates clear regulatory exposure.
Individuals
Dozens of named individuals can be contacted directly. We have their home addresses, compensation details, and in some cases passport information. Each person can receive documentation of exactly what data was exposed.
Competitors
Companies in the temporary structure and event infrastructure sector would find significant value in the pricing data, structural engineering documents, and tender submissions. The cost calculation spreadsheets reveal how this company prices projects across different markets and event types.
Media
The involvement in high-profile events creates newsworthy angles. Published data surfaces in search results and due diligence processes for years.
WHAT CAN HAPPEN
Regulatory notifications can be filed with German data protection authorities
Individuals can be contacted directly with evidence of their exposed personal data
Competitors can receive pricing methodology and structural engineering documentation
The complete archive can be published and indexed
Tender documents can be shared with competing bidders for upcoming projects
Financial reports can be distributed to industry analysts
Once this data is released, other parties can independently exploit the personnel records, financial information, and proprietary engineering documentation. The dataset can be traded, repackaged, and redistributed without restriction.
