EWM Group Rede de TI da EWM Group · Breach

Aurora Ransomware Claims Attack on EWM Group, Owner of Peacocks

Oct 28, 2026 · 1 min read

The Aurora ransomware group listed EWM Group, the UK fashion group behind Peacocks, Edinburgh Woollen Mill and Bonmarché, on its leak site. The listing shows no data size or sample, the company has not commented, and there is no independent reporting. The claim remains unverified; customers should watch for phishing using these brand names.

By HIFY Radar newsroom Updated 10/28/2026 10:26 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

The Aurora ransomware group listed EWM Group, the UK fashion group behind Peacocks, Edinburgh Woollen Mill and Bonmarché, on its leak site. The listing shows no data size or sample. The company has made no public statement and there is no independent reporting of an incident.

Why it matters

If genuine, customer, loyalty and staff data across several high-street chains could be exposed, according to DailyDarkWeb's analysis. Aurora is a little-known name, and new gangs sometimes list big brands to build a reputation. Edinburgh Woollen Mill was also claimed by Egregor in 2020.

What to do

Treat it as an unverified claim. Monitor EWM Group's official channels for statements. Warn customers and staff to be wary of phishing that uses the Peacocks, Edinburgh Woollen Mill and Bonmarché brand names.

For the technical team

Affected: EWM Group Rede de TI da EWM Group, grupo britânico de moda dono das marcas Peacocks, Edinburgh Woollen Mill e Bonmarché · EWM Group IT network, the UK fashion group behind Peacocks, Edinburgh Woollen Mill and Bonmarché. Actual scope unknown.
Exploitation: No confirmed exploitation. Claim listed by the Aurora gang on its leak site, reported by DailyDarkWeb. No data sample or size, no victim statement, and no independent reporting.
Fix: Not applicable. No patch or technical mitigation disclosed.
Vector: Not described in the sources. This is a claim posted on a leak site; no compromise details were disclosed.
More details: According to DailyDarkWeb, Aurora is a little-known name and new gangs sometimes list big brands to build a reputation. Edinburgh Woollen Mill was previously claimed by Egregor in 2020. DailyDarkWeb recommends caution with phishing using the brand names.