Emperador Claims Theft of SitePro Rentals Employee Data, Demands $150,000
Summary
Ransomware group emperador claims it stole employee data from SitePro Rentals, including SSNs and pay records, and demands $150,000 in XMR. The monitoring post says the claims are unconfirmed.
Key points
- The ransomware.live post attributes the claim to actor emperador and dates its discovery to September 28, 2026.
- The group claims to have obtained employee Social Security numbers, home addresses, birth dates, salaries, and work-status details.
- The actor claims access to 338,000 pay records; the post does not independently verify the claim.
- The group demands $150,000 in XMR and says it will send next-step instructions by email.
- The monitoring post invites an official statement from SitePro Rentals for clarification.
Article Details
- Victim
- SiteProRentals
- Claim Date
- 2026-09-28
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by emperador; not independently confirmed.
- Exfiltrated Data
- The group claims to have obtained employees’ Social Security numbers, home addresses, birth dates, salaries, work-status details, and pay records.
- Exfiltrated Size
- The group claims access to 338,000 pay records.
- Ransom Demand
- The group claims to demand $150,000 in XMR.
- Leak Status
- The source reports a ransomware group claim but does not report that data was published or leaked.