Skip to content
Emperador Ransomware Targets AB InBev, Demands $1M Ransom

Emperador Ransomware Targets AB InBev, Demands $1M Ransom

First seen 25 Oct 2026, 16:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 25, 2026 at 18:13 UTC
  • •Emperador ransomware claims to have breached AB InBev, demanding $1M in Bitcoin.
  • •The group claims to possess 3.9 GB of data, including corporate emails and access logs.
  • •AB InBev has not confirmed any breach, and the authenticity of the claims remains unverified.

The Emperador ransomware group has claimed responsibility for a cyber incident involving AB InBev, the world's largest brewer. They have reportedly added the company to their leak site, claiming to possess 3.9 GB of data, including 2,510 corporate emails and 19,000 access logs. The group is demanding a ransom of $1 million in Bitcoin, with a deadline set for November 23. The authenticity of the data has not been independently verified, and AB InBev has not confirmed any breach. The data appears to focus on marketing and cloud storage rather than brewing operations. If the internal PKI certificates are valid, they would require revocation and rotation to mitigate potential risks. Partners and employees are advised to be vigilant for AB InBev-themed phishing attempts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-25
Emperador claims AB InBev as a victim
The ransomware group added AB InBev to their leak site, claiming to have stolen significant corporate data.
Ransomware.Live
2026-10-25
AB InBev data leak announcement
Emperador announced the data leak, including 2,510 emails and 19,000 access logs, demanding a ransom.
X

More articles in this cluster (2)

Following this threat?

Track Emperador and AB InBev in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

Has AB InBev confirmed the breach?
No, AB InBev has not publicly confirmed any cyber incident related to this claim.
What type of data was reportedly stolen?
The group claims to have stolen corporate emails, access logs, and internal PKI certificates.
What should AB InBev do to mitigate risks?
They should consider revoking and rotating any potentially compromised PKI certificates and monitor for phishing attempts.