Skip to content
Leak-site post naming Frommann Energie GmbH, captured by ThreatCluster

Frommann Energie GmbH

emperador

Ransomware leak-site victim intelligence · DE

Data size
1.0 GB
Files
1
Views
5,019
Posted
Oct 24, 2026
Country
Germany
Industry
fuels, heating oil, motor fuels and lubricants

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

The emperador group claims to have published about 1.0 GB of data from Frommann Energie GmbH, a German fuels and lubricants company, in a single file named Frommann.data1.zip on their leak site. The data is described as including personal, corporate, employee and customer data. The leak page states the publication status as listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
frommann-oel.de

What was taken

German company that sells and delivers fuels, primarily heating oil (Heizöl), but also motor fuels and lubricants. Archived personal and corporate data of employees and customers. Here are the most important documents.

Data categories
personal datacorporate data
File types seen
zip × 1
Sample files (1)
Frommann.data1.zip

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring a stylized red figure with angular shapes and a pointed top, resembling a mask or helmet.
onion leak page1.2 MB
Screenshot of an Excel spreadsheet listing company names, email addresses, and associated identifiers.
onion leak page20 KB
Screenshot of a spreadsheet containing company names, addresses, and email addresses related to financial institutions.
onion leak page30 KB