Leak-site post naming Power Moendas, captured by ThreatCluster

Power Moendas

arcusmedia

Ransomware leak-site victim intelligence

Posted
Jul 26, 2026
Countdown
EST LEAK : 7 Days
Country
Brazil
Industry
manufacturing processes of equipment and industrial maintenance

Summary

Written by ThreatCluster from site fields, victim profile, leak post, screenshot

The leak post from arcusmedia claims data from Power Empral has been exfiltrated, but it does not specify the amount or data types. The page shows EST LEAK: 7 Days and EST SELL: 5 Days. The victim is described as Power Empral, a Brazil-based manufacturer of equipment and industrial maintenance headquartered in Sertãozinho, São Paulo, with a 118,000 m2 facility, and it names a platform transfer.it and an individual Fyodor Dostoevsky.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
transfer.it
People named
Fyodor Dostoevsky

What was taken

LEAKED Based in the sugar-energy industrial hub, in the city of Sertãozinho/SP, Power Empral has …

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

EST LEAK
7 Days
EST SELL
5 Days

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture