Skip to content
Leak-site post naming Electrolux, captured by ThreatCluster

Electrolux

emperador

Ransomware leak-site victim intelligence · EN

Data size
5.4 GB
Files
1
Views
14,683
Posted
Sep 19, 2026
Country
Sweden
Industry
home appliances

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note, our reporting

Electrolux Group data totaling about 41GB was claimed stolen, with sample archives published on the group’s leak page as fileshare.7z, supplier_portal.7z and electrolux_backup.7z. The ransom note states they accessed an Azure database and exported the data; electrolux_backup.7z is password-locked, and the password and the data will be leaked if the ransom is not paid. The leak page identifies Electrolux Group as the victim and lists publication status as listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
electrolux.com
Platforms
Azure

What was taken

Greetings. Since Electrolux has refused to negotiate, we will proceed with leaking the data. Despite acknowledging the data breach, they continue to refuse.

Data categories
employee data
File types seen
zip × 1
Sample files (1)
electrolux.zip

Ransom note

Published by the group on their leak site, reproduced verbatim.

Greetings. Since Electrolux has refused to negotiate, we will proceed with leaking the data. Despite acknowledging the data breach, they continue to refuse.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Gallery
Proof Image
To Publish
electrolux_backup.7z
session_id
05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358
to_publish
electrolux_backup.7z (12.7 GB)
proof_files
fileshare.7z (1.1 MB); supplier_portal.7z (4.0 MB)
sample_files_note
Sample Files: fileshare.7z, supplier_portal.7z; To Publish: electrolux_backup.7z (12.7 GB)
You have one week before we release more data - starting with information on you
deadline

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo with angular shapes resembling a hooded figure or mask.
onion leak page1.2 MB
Directory listing of files with various folder names and sizes, including "credentials," "data_azure," and "reports."
onion leak page174 KB

Negotiation

refused to negotiate