Summary
Written by ThreatClusterfrom site fields, file listing, leak post, screenshot, ransom noteEmperador claims to have exfiltrated about 920 MB of data from Spelman Logistics, including 1.2M contact records (emails and phone numbers), 245K carrier profiles with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries from the MVMNT TMS. Sample filenames published are spelman.zip and spelman2.7z, with file types listed as 7z and zip. The leak page states the publication status is published, and the group lists exposed partner entities such as ALG Canada Inc, Line Transportation Inc, Maverick Acquisition Ventures Inc, Reliable Freight Solutions, Rhode Sense, and more.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- MVMNT TMS
What was taken
Dear Spelman Logistics, We are now in possession of 1.2M contact records (emails and phone numbers), 245K carrier profiles complete with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries pulled from your MVMNT TMS. Your exposure extends well beyond your own walls. We have also reached into the systems of your partners, including: ALG Canada Inc Line Transportation Inc Maverick Acquisition Ventures Inc Reliable Freight Solutions Rhode Sense and more. If you would rather not have us contact your partners and make life difficult for your employees, we suggest you pay the following: $500,000 in BTC or XMR. You will shortly receive an email explaining how to reach us. If that fails, contact us at: Email: [email protected] / [email protected]
Ransom note
Published by the group on their leak site, reproduced verbatim.
Dear Spelman Logistics, We are now in possession of 1.2M contact records (emails and phone numbers), 245K carrier profiles complete with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries pulled from your MVMNT TMS. Your exposure extends well beyond your own walls. We have also reached into the systems of your partners, including: ALG Canada Inc Line Transportation Inc Maverick Acquisition Ventures Inc Reliable Freight Solutions Rhode Sense and more. If you would rather not have us contact your partners and make life difficult for your employees, we suggest you pay the following: $500,000 in BTC or XMR. You will shortly receive an email explaining how to reach us. If that fails, contact us at: Email: [email protected] / [email protected] Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Session
- 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358
- session
- 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358
- partners
- ALG Canada Inc; Line Transportation Inc; Maverick Acquisition Ventures Inc; Reliable Freight Solutions; Rhode Sense; and more.
- partners_exposed
- ALG Canada Inc; Line Transportation Inc; Maverick Acquisition Ventures Inc; Reliable Freight Solutions; Rhode Sense; and more.
Leak-site images (3)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.