Dark Web Intelligence on X: " EMPERADOR CLAIMS U.S. PARCEL CARRIER ONTRAC

Dark Web Intelligence on X: "🇺🇸🚨 EMPERADOR CLAIMS U.S. PARCEL CARRIER ONTRAC — NEW RANSOMWARE LISTING FOLLOWS EARLIER CONFIRMED NETWORK BREACH

The Emperador ransomware operation has newly listed OnTrac, one of the largest alternative last-mile parcel carriers in the United States.

• The fresh Emperador listing was observed September 23–24

• Emperador alleges theft of roughly 197,000 employee records and demands $1 million

• OnTrac says its network spans 35 states + Washington, D.C. and reaches roughly 70% of the U.S. population

• The carrier operates 100+ locations and partners with more than 7,000 independent delivery contractors

• No current public evidence independently establishes what data Emperador obtained, whether systems were encrypted, or whether operations are affected

• OnTrac has not publicly confirmed the new ransomware claim

• Separately, OnTrac disclosed a confirmed corporate-network breach earlier this year: unauthorized access March 20–22 with customer files accessed

• There is currently NO evidence establishing that the earlier breach and this new Emperador claim are the same incident

This is currently an UNVERIFIED EMPERADOR THREAT-ACTOR CLAIM. The ransomware listing alone does not prove the claimed compromise or its scope.

The earlier confirmed breach makes this new listing worth watching closely, but the two events should not be conflated without evidence. If Emperador publishes samples, timestamps or internal material, those artifacts may help establish whether this represents a new intrusion, delayed extortion from the March compromise, or an unrelated claim.

#OnTrac #Emperador #Ransomware #Logistics #SupplyChain #DataBreach #ThreatIntel #DarkWeb #DDW"

🇺🇸🚨 EMPERADOR CLAIMS U.S. PARCEL CARRIER ONTRAC — NEW RANSOMWARE LISTING FOLLOWS EARLIER CONFIRMED NETWORK BREACH

The Emperador ransomware operation has newly listed OnTrac, one of the largest alternative last-mile parcel carriers in the United States.

• The fresh Emperador listing was observed September 23–24

• Emperador alleges theft of roughly 197,000 employee records and demands $1 million

• OnTrac says its network spans 35 states + Washington, D.C. and reaches roughly 70% of the U.S. population

• The carrier operates 100+ locations and partners with more than 7,000 independent delivery contractors

• No current public evidence independently establishes what data Emperador obtained, whether systems were encrypted, or whether operations are affected

• OnTrac has not publicly confirmed the new ransomware claim

• Separately, OnTrac disclosed a confirmed corporate-network breach earlier this year: unauthorized access March 20–22 with customer files accessed

• There is currently NO evidence establishing that the earlier breach and this new Emperador claim are the same incident

This is currently an UNVERIFIED EMPERADOR THREAT-ACTOR CLAIM. The ransomware listing alone does not prove the claimed compromise or its scope.

The earlier confirmed breach makes this new listing worth watching closely, but the two events should not be conflated without evidence. If Emperador publishes samples, timestamps or internal material, those artifacts may help establish whether this represents a new intrusion, delayed extortion from the March compromise, or an unrelated claim.

Ransomware.live discovered on 2026-09-23 that OnTrac has been claimed by Emperador ransomware group

🇺🇸🚨 EMPERADOR CLAIMS U.S. PARCEL CARRIER ONTRAC — NEW RANSOMWARE LISTING FOLLOWS EARLIER CONFIRMED NETWORK BREACH

The Emperador ransomware operation has newly listed OnTrac, one of the largest alternative last-mile parcel carriers in the United States.

• The fresh Emperador listing was observed September 23–24

• Emperador alleges theft of roughly 197,000 employee records and demands $1 million

• OnTrac says its network spans 35 states + Washington, D.C. and reaches roughly 70% of the U.S. population

• The carrier operates 100+ locations and partners with more than 7,000 independent delivery contractors

• No current public evidence independently establishes what data Emperador obtained, whether systems were encrypted, or whether operations are affected

• OnTrac has not publicly confirmed the new ransomware claim

• Separately, OnTrac disclosed a confirmed corporate-network breach earlier this year: unauthorized access March 20–22 with customer files accessed

• There is currently NO evidence establishing that the earlier breach and this new Emperador claim are the same incident

This is currently an UNVERIFIED EMPERADOR THREAT-ACTOR CLAIM. The ransomware listing alone does not prove the claimed compromise or its scope.

The earlier confirmed breach makes this new listing worth watching closely, but the two events should not be conflated without evidence. If Emperador publishes samples, timestamps or internal material, those artifacts may help establish whether this represents a new intrusion, delayed extortion from the March compromise, or an unrelated claim.

Ransomware.live discovered on 2026-09-23 that OnTrac has been claimed by Emperador ransomware group