Skip to content
Dark Web Intelligence on X: " AB INBEV LISTED BY "EMPERADOR" RANSOMWARE ...

Dark Web Intelligence on X: " AB INBEV LISTED BY "EMPERADOR" RANSOMWARE ...

X • October 25, 2026

The Emperador ransomware group has added AB InBev, the Belgium-based world's largest brewer behind Budweiser, Corona and Stella Artois, to its leak site.

The group claims 3.9 GB of data, including:

* ~2,510 corporate emails across subsidiaries

* ~19,000 access logs and internal portal records

* Internal PKI certificates and Azure cloud storage files

The group is reportedly demanding $1 million in Bitcoin, with a release timer running to around Nov 23.

The claim has not been independently verified, and AB InBev has not publicly confirmed a cyber incident.

The claimed haul is small for a company of this size and leans toward marketing, email and cloud-storage data rather than brewing or production systems. If the PKI certificates are genuine, they would need revocation and rotation. Partners and staff should watch for AB InBev-themed phishing. Unverified threat-actor claim, NOT confirmation of a breach.

Extracted Entities

Attack Types (1)

Companies (2)

Countries (1)

Ransomware Groups (1)