Skip to content
Leak-site post naming Car Service Abschlepp, captured by ThreatCluster

Car Service Abschlepp

emperador

Ransomware leak-site victim intelligence

Data size
2.8 GB
Files
1
Views
29,624
Posted
Sep 27, 2026
Country
Germany
Industry
Automotive towing / recovery

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

The group emperador claims to have exfiltrated 2.8 GB of data from Car Service Abschlepp, including employee and customer data, and published sample file Car_Service_Abschlepp.data.zip on their leak site. The victim is identified as CSA Car Service Abschlepp- & Bergungsdienst GmbH, with domain www.csa-abschleppdienst-berlin.de and headquarters in Berlin. They state the data consists of archived personal and corporate records of employees and customers, and the leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

PUBLISHED CSA Car Service Abschlepp- & Bergungsdienst GmbH Genslerstraße 72, 13055 Berlin Archived personal and corporate data of employees and customers Here are the most important documents

Data categories
Personal data of employeesCorporate data of employees and customers
File types seen
zip × 1
Sample files (1)
Car_Service_Abschlepp.data.zip

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page1.2 MB
onion leak page28 KB
onion leak page27 KB