Skip to content
Leak-site post naming EPM, captured by ThreatCluster
Back to victims

EPM

everest

Ransomware leak-site victim intelligence

Data size
20.43 GB
Files
22
Views
62,000
Posted
Aug 5, 2026
Country
CO
Industry
Energy & Utilities

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Everest states a leak of 20.43 GB from Empresas Públicas de Medellín (EPM) and its affiliated CHEC, comprising 22 PBIX Power BI files related to client debt, CMI indicators, overdue analysis, and collections management. The post claims 16 PBIX files are for EPM and 6 for CHEC, with sample filenames such as EPMCARTERA.pbix and CARTERA_CARGOS.pbix. The leak page identifies the victim as EPM (domain epm.com.co) and notes the publication status as "published."

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Power BI

What was taken

Leak of Empresas Públicas de Medellín (EPM) and its affiliated company CHEC

Data categories
client debt dataCMI indicatorsoverdue analysiscollections management
File types seen
pbix × 22
Sample files (22)
EPMCARTERA.pbix
CARTERA_CARGOS.pbix
CARTERA_DIFERIDA.pbix
CMI_CARTERA.pbix
CMI_HISTORICO_INDICADORES.pbix
CMI_INDICADORES_EPM_MEDICION_OFERTAS.pbix
CMI_INDICADORES_FULL.pbix
CMI_INDICADORES_MOROSOS_CONSOLIDADO_RANGO_MORA.pbix
CMI_INDICADORES_MOROSOS_EPM.pbix
CMI_INDICADORES_MOROSOS_FILIALES.pbix
CMI_INDICADORES_MOROSOS_MEDICION_OFERTAS.pbix
CMI_INDICADORES_MOROSOS_RANGO_MORA.pbix
CMI_RODAMIENTO_ESTADO_CORTE.pbix
CMI_RODAMIENTOS_RANGO_MORA.pbix
RESUMEN_GESTION.pbix
RESUMEN_GESTION_HISTORICO.pbix
CHEC CARTERA.pbix
CARTERA_DIFERIDA.pbix
CMI_CARTERA.pbix
CMI_INDICADORES_FULL.pbix
CMI_INDICADORES_MOROSOS_FILIALES.pbix
CMI_INDICADORES_MOROSOS_RANGO_MORA.pbix

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download
https://fex.net/s/kcprlly

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" in orange with a black play button shape integrated into the design.
onion leak page7.5 KB
onion leak page5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in a bold, blue font.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB