In the construction/industrial equipment rental sector, SitePro Rentals (Texas, U.S.) reports a ransomware extortion claim by the threat actor emperador, alleging theft of sensitive employee data including Social Security numbers, home addresses, birth dates, salaries, and pay records, with instructions to follow via email. The group demands a relatively small ransom of $150k USD in XMR, warning that the victim has until contact is made to receive the next steps. #UnitedStates
Incident Details
- Victim: SiteProRentals
- Sector: Hospitality
- Country:
- Actor: emperador
- Source: http://emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion/post/siteprorentals/
- Discovered: 2026-09-28T02:51:39.941454+00:00
- Published: 2026-09-28T01:27:00+00:00
Information
- Texas-based construction and industrial equipment rental company founded in 2021, serving contractors across the U.S. from more than 30 locations.
- Claims to have obtained employees’ Social Security numbers, home addresses, birth dates, salaries, and work status details.
- Claims access to 338,000 pay records.
- States that instructions for next steps will be sent by email.
- Demands a ransom of $150,000 in XMR.
- Provides contact details via email and Session for follow-up.
Disclaimer: This post is based on public claims made by the ransomware group "emperador". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.