Emperador Claims OnTrac Employee Data and Demands $1 Million
Summary
The ransomware actor emperador claims to have exfiltrated 197,000 OnTrac employee records and demands $1 million, threatening public release. The report says the claims are unconfirmed.
Key points
- The report attributes the claims to ransomware actor emperador and says they are unconfirmed.
- The actor claims to have obtained 197,000 employee records containing personal, HR, and contact information.
- The group reportedly demanded $1 million and threatened to publish the data if OnTrac did not pay.
- The report says ransom and extortion notices were sent to multiple OnTrac contacts.
- The claim was listed as discovered and published on September 23, 2026.
Article Details
- Victim
- OnTrac
- Claim Date
- 2026-09-23
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by the threat actor; not independently confirmed.
- Exfiltrated Data
- The actor claimed to have obtained employee PII and related HR and contact details.
- Exfiltrated Size
- 197,000 employee records (claimed); no data volume reported.
- Ransom Demand
- $1 million (reported demand; not independently confirmed).
- Leak Status
- Public release was threatened if payment was not made; the source does not report that the data was published.