Skip to content
Leak-site post naming GTL Concreto e Logística LTDA, captured by ThreatCluster
Back to victims

GTL Concreto e Logística LTDA

emperador

Ransomware leak-site victim intelligence · PT

Data size
2.0 GB
Files
1
Views
10,808
Posted
Oct 19, 2026
Country
Brazil
Industry
construction materials and logistics

Summary

Written by ThreatClusterfrom leak post

The emperador group claims 2.0 GB of data was leaked from GTL Concreto e Logística LTDA, published on the group’s leak site. They state the data includes financial documents, personal and customer data, and employee credentials. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
gtlconcreto.com.br

What was taken

Production and preparation of ready-mixed concrete and mortars. Production of cement products for construction. Construction of buildings and other construction works. Rental of vehicles and industrial equipment without an operator. IN THE ARCHIVE FINANCIAL DOCUMENTS, PERSONAL AND CUSTOMER DATA, EMPLOYEE CREDENTIALS.

Data categories
financial documentspersonal datacustomer dataemployee credentials
File types seen
zip × 1
Sample files (1)
gtl.data1.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

gallery_image_count
3
IN THE ARCHIVE FINANCIAL DOCUMENTS, PERSONAL AND CUSTOMER DATA, EMPLOYEE CREDENT
present

Leak-site images (5)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo resembling a geometric figure with sharp angles and a central emblem that suggests a face or mask.
onion leak page1.2 MB
Screenshot of a table containing login credentials and codes for various services, including columns for CPF, Login, Senha, and Pin.
onion leak page11 KB
Screenshot of a table listing various companies with columns for ID, date, and financial amounts.
onion leak page52 KB
Screenshot of a table listing names alongside numerical data, including what appears to be identification numbers.
onion leak page15 KB