Skip to content
Datasuckers Hack ATB Supermarket Chain, Demand Ransom for Customer Data

Datasuckers Hack ATB Supermarket Chain, Demand Ransom for Customer Data

First seen 5 Oct 2026, 16:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 17:06 UTC
  • •Datasuckers claim to have stolen data from 7.9 million customers of ATB.
  • •A ransom of $400,000 in cryptocurrency is being demanded by the attackers.
  • •ATB denies that any personal data has been compromised.

A group of hackers known as Datasuckers has reportedly breached the ATB supermarket chain's website and app, claiming to have stolen data from 7.9 million customers. The attackers are demanding a ransom of $400,000 in cryptocurrency, threatening to leak the data if their demands are not met. ATB has stated that no personal data has been compromised, as they do not store it on the affected resources. The attack has caused disruptions to the platforms, which intermittently display a ransom demand page with a countdown timer. The stolen data allegedly includes names, email addresses, phone numbers, physical addresses, password hashes, and employee records. ATB has not confirmed the details of the attack or the claims made by the hackers. The situation is ongoing, with the ransom deadline set for two hours from the time of the attack.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-05
Datasuckers claim breach of ATB
Hackers claim to have accessed data of 7.9 million customers and are demanding a ransom.
Pravda.Ua
2026-10-05
Ransom demand displayed on ATB's website
A placeholder page demanding $400,000 in cryptocurrency appeared on ATB's platforms.
Unn.Ua

More articles in this cluster (3)

Following this threat?

Track ATB in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 4

Common questions

What data has been reportedly stolen?
The attackers claim to have stolen names, email addresses, phone numbers, physical addresses, password hashes, and employee records.
What has ATB said about the breach?
ATB has stated that no personal data has been compromised as they do not store it on the affected resources.
What should affected customers do?
Customers should monitor their accounts for suspicious activity and change passwords if they suspect their data may have been compromised.