Skip to content
Leak-site post naming TWICE SRL, captured by ThreatCluster

TWICE SRL

emperador

Ransomware leak-site victim intelligence · EN

Data size
560.0 MB
Views
301
Posted
Oct 27, 2026
Country
Republic of San Marino
Industry
production and sale of fashion clothing and accessories

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Emperador claims to have exfiltrated 560.0 MB of TWICE SRL data, including personal and corporate data, with sample file twice.data.zip. The leak page describes the data as archived personal and corporate data of employees and customers. TWICE SRL is a San Marino-based producer and seller of fashion clothing and accessories. The leak page shows the publication status as listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
https://www.twice-srl.com/

What was taken

Archived personal and corporate data of employees and customers.

Data categories
personal datacorporate data
File types seen
zip × 1
Sample files (1)
twice.data.zip

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo resembling a geometric figure with sharp angles and a central emblem that suggests a face or mask.
onion leak page1.2 MB
Screenshot of a packing list with details including item numbers, product descriptions, quantities, and weights.
onion leak page40 KB
Screenshot of a packing list detailing items, including scarves in various colors and quantities, with total weights and measurements.
onion leak page37 KB