Emperador Claims Data and Source-Code Theft at Nexbex Solutions

Summary
The ransomware group emperador claims it stole about 600 MB of client data and over 10 GB of source code from Nexbex Solutions. The post says the claims are unconfirmed.
Key points
- The claim names Nexbex Solutions Private Limited, a technology consulting and software engineering firm in Kerala, India.
- Emperador alleges access to client databases containing names, email addresses, phone numbers, and physical addresses, with about 600 MB exfiltrated.
- The group also claims to have obtained over 10 GB of source code from more than 200 projects.
- The post lists domains including club7ms[.]com, rayssportsnetwork[.]com, and hwzthat[.]com, along with multiple subdomains.
- The post attributes the information to public claims by emperador and says their accuracy could not be confirmed.
Article Details
- Victim
- Nexbex Solutions Private Limited
- Claim Date
- 2026-09-11
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by emperador; not independently confirmed.
- Exfiltrated Data
- The group allegedly accessed client databases containing names, emails, phone numbers, and addresses, and obtained source code from more than 200 projects. The source also says domains and subdomains were compromised or stolen.
- Exfiltrated Size
- Approximately 600 MB of database data was claimed; source code was claimed to exceed 10 GB and still be growing.
- Leak Status
- The source reports a public claim by emperador but does not establish that data was leaked or published.
Threat Actors
Countries
Industries
Software engineeringclaim involves emperador targeting Nexbex Solutions Private Limited, a technology consulting and software engineering firm based in Malappuram, Kerala (India), alleging access to 600 MB of client-sensitive databasesTechnology consultingThe ransomware threat claim involves emperador targeting Nexbex Solutions Private Limited, a technology consulting and software engineering firm based in Malappuram, Kerala (India), alleging access to 600 MB of
