Ransomware group

Emperador ransomware: victims and leak site activity

The Emperador ransomware group has listed 15 victims on its leak site since August 2026; its latest post is from 10 September 2026. Most affected countries: Brazil, Albania and Argentina. Most targeted sector: Government & Defense.

Total posts 15
First seen 2026-08-12
Latest post 2026-09-10
Countries hit 11

About Emperador

Leak site (Tor)
http://emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion

Most targeted countries

  1. Brazil 2
  2. Albania 1
  3. Argentina 1
  4. Bosnia and Herzegovina 1
  5. Colombia 1
  6. Spain 1
  7. India 1
  8. South Korea 1
  9. Philippines 1
  10. United States 1
All countries →

Most targeted sectors

  1. Government & Defense 4
  2. Energy & Utilities 2
  3. Manufacturing 2
  4. Technology 2
  5. Agriculture and Food Production 1
  6. Education 1
  7. Professional Services 1
  8. Transportation 1
All sectors →

Emperador victims per year

15 2026

All 15 victims

Search every post in the full table.
Victim Country Sector Discovered
EASY JOB S.A.S. Colombia Professional Services
Bosnia and Herzegovina Mine Action Center Bosnia and Herzegovina Government & Defense
Universal Starch-Chem Allied Ltd India Manufacturing
BAYMER — Manufacturing
Judicial Branch of the Province of Jujuy Argentina Government & Defense
Uniguacu Brazil Other
Hanwha Renewables South Korea Energy & Utilities
Ipro.com(revealdata.com) customer DB + full database backup — Technology
Capitol Mechanics United States Transportation
FRUCASTRO SL Spain Agriculture and Food Production
Vietnam Electricity(EVNHANOI) Vietnam Energy & Utilities
NetExam — Technology
Prefeitura Municipal de Arcos Brazil Government & Defense
Albania's Official National Teacher Training Portal Albania Education
City Government of Baguio Philippines Government & Defense