Skip to content
Leak-site post naming B2Chat, captured by ThreatCluster

B2Chat

emperador

Ransomware leak-site victim intelligence · EN

Data size
70.5 MB
Files
50
Views
6,473
Posted
Oct 23, 2026
Country
Spain
Industry
business communication platform

Summary

Written by ThreatClusterfrom leak post

Emperador claims to have exfiltrated 70.5 MB of data from B2Chat, a Spain-based business communications platform. The leak states the data includes sensitive financial information, as well as employees’ names, emails and phone numbers, and data related to clients and partners. The leak post is currently listed on the group’s site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.b2chat.io
Platforms
WhatsApp Facebook Messenger Telegram

What was taken

B2Chat is a multimillion dollar business communication platform based in Spain that provides tools for customer support, sales, and engagement. It allows businesses to interact with customers through various channels, such as live chat, chatbots, and messaging apps (for example, WhatsApp, Facebook Messenger, and Telegram). The platform is designed to help companies streamline communication, improve response times, and enhance customer satisfaction.

Data categories
financialsHR dataclients' datapartners' data
Leak site tags
sample filesB2Chat SASAfiliadosFacturasPropuesta
File types seen
csv × 5pdf × 15docx × 4xlsm × 3xlsx × 22rpmsg × 1
Sample files (50)
INFORME CARTERA.xlsx
2025-02-01T10-20 transacción n.º 8784466478335164.pdf
Factura de venta electrónica BCH48132.pdf
RPS TSP B2CHAT SAS .pdf
6LZPH7QMRS7D5ZHV0CJH-2024-11-ICW.csv
6LZPH7QMRS7D5ZHV0CJH-2024-12-DYH.csv
6LZPH7QMRS7D5ZHV0CJH-2024-12-ZOQ.csv
6LZPH7QMRS7D5ZHV0CJH-2025-01-3YS.csv
6LZPH7QMRS7D5ZHV0CJH-2025-01-HZY.csv
2025-02-01T10-20.pdf
Afiliados-Sura (4).xlsx
Administrativo y financiero.xlsx
ARCHIVO CLIENTES DEV RETE FUENTE.xlsx
AUTOEVALUACION-SG-SST-0312-2.xlsx
B2 Chat RUT julio 2024.pdf
B2Chat_SAS_Informacion_Personas.xlsx
Balance de Prueba por Cuenta (Normal).xlsx
ALEGRA CONFIG.xlsx
Cronograma.docx
ESTRATEGIA B2CHA 2025.docx
Factura.pdf
Factura de venta electrónica BCH49014.pdf
Factura de venta electrónica BCH49015.pdf
Factura de venta electrónica BCH49016.pdf
Factura de venta electrónica BCH49017.pdf
Factura Envento Bolos - Actividad Q1 2025.pdf
FACTURACIÓN EU.docx
Factura Notion feb.pdf
Facturas Capas.xlsx
Formato_Documentacion_Procesos.docx
INFORME CARTERA.xlsx
Listado de Proveedores.xlsx
Métricas_B1Chat.xlsx
Métricas_B2Chat.xlsx
message_v4.rpmsg
Metrics_saas_invoices_zoho3 Diciembre 2024 2 (1).xlsm
OKRs-FY25-Administración-B2CHAT (1).xlsx
Metrics_saas_invoices_zoho3 Diciembre 2024 2.xlsm
Metrics_saas_invoices_zoho3 Enero 2025.xlsm
OKRs-FY25-Administración-B2CHAT.xlsx
OKRs-FY25-Administración-B2CHAT (2).xlsx
Propuesta DIAGNÓSTICO EVALUACIÓN.xlsx
Revision cierre de mes - Facturacion (Diciembre) .xlsx
Revision cierre de mes - Facturacion (Enero) .xlsx
Presentacion_B2Chat_2024[1].pdf
RHB2chat.pdf
SALDO PRESTAMOS_ SEPTIEMBRE DE 2017-1 (2).xlsx
RPS TSP B2CHAT SAS.pdf
Seguimiento Beneficios.xlsx
SIMULADORCAPAS - Ultima version.xlsx

Ransom note

Published by the group on their leak site, reproduced verbatim.

If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business.

Leak-site images (6)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo resembling a geometric figure with sharp angles and a central emblem that suggests a face or mask.
onion leak page1.2 MB
Screenshot of a spreadsheet containing multiple columns with data such as names, identification numbers, dates, and various other attributes.
onion leak page1.6 MB
Screenshot of a spreadsheet containing columns for ID, description, type, date, tariffs, account, quantity, and country, with various entries listed.
onion leak page1.0 MB
Screenshot of a table listing job titles, names, and functions in a structured format, with some text highlighted in red.
onion leak page771 KB
Invoice from Notion Labs, including details such as date, recipient, and amounts due, with a total of 636 US$.
onion leak page263 KB