Skip to content
Leak-site post naming Capitol Mechanics, captured by ThreatCluster

Capitol Mechanics

emperador

Ransomware leak-site victim intelligence

Data size
120.9 MB
Files
3
Views
9,966
Posted
Aug 27, 2026
Country
US
Industry
Transportation

Summary

Written by ThreatClusterfrom file listing, leak post, screenshot

Emperador claims Capitol Mechanics was breached, exposing 120.9 MB of data across three files—Capitol.data1.zip, Capitol.data2.zip, Capitol.data3.zip—described as fresh databases and important documents. The leak post is published and lists three claimed files. The victim named by the group is Capitol Mechanics.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Capitol Mechanics , fresh databases, important docs

File types seen
zip × 3
Sample files (3)
Capitol.data2.zip
Capitol.data3.zip
Capitol.data1.zip

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture