Skip to content
Leak-site post naming METROCOLOR S.A., captured by ThreatCluster

METROCOLOR S.A.

emperador

Ransomware leak-site victim intelligence · EN

Data size
21.6 GB
Files
2
Views
25,231
Posted
Oct 5, 2026
Country
Peru
Industry
printing and packaging

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

The emperador group states METROCOLOR S.A., a Peruvian printing company, had about 21.6 GB of data taken, released in two ZIP files (1.zip and 2.zip). The data claimed include personnel data and customer data. The leak post is published on the group’s site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
https://metrocolor.com

What was taken

A Peruvian company from the printing industry. Commercial printing, packaging, labels, boxes, books, magazines, booklets and promotional products. The archives contain several thousand documents with personnel and customer data.

Data categories
personnel datacustomer data
File types seen
zip × 2
Sample files (2)
1.zip
2.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
The archives contain several thousand documents with personnel and customer data.
To Publish
["1.zip (14.4 GB)", "2.zip (7.2 GB)"]
Gallery contents
Proof Image

Leak-site images (5)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo with angular shapes resembling a hooded figure or mask.
onion leak page1.2 MB
Screenshot of a spreadsheet containing columns with data labeled "Top," "N. Cuenta," "Denominacion de Cuenta," and various numerical entries.
onion leak page63 KB
Screenshot of a financial report with columns for various metrics, including "Venta Neta," "Costo Fijo Total," and percentage variations.
onion leak page34 KB
Screenshot of a spreadsheet listing client accounts with columns for descriptions, account numbers, balances, and other financial details.
onion leak page61 KB