Emperador claims to have stolen 1.2M contact records, 245K carrier profiles with EIN/SSN, 57K bank accounts, 334K document URLs, and 4.5M carrier registry entries from Spelman Logistics’ MVMNT TMS, and to have compromised partner systems including ALG Canada Inc, Line Transportation Inc, Maverick Acquisition Ventures Inc, Reliable Freight Solutions, and Rhode Sense. The group demands a $500,000 BTC/XMR ransom and threatens partner disruption, listing impacted countries as #countryname.
Incident Details
- Victim: Spelman Logistics
- Sector: Transportation
- Country:
- Actor: emperador
- Source: http://emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion/post/spelman-logistics/
- Discovered: 2026-10-11T22:21:27.370329+00:00
- Published: 2026-10-11T21:40:00+00:00
Information
- They claim to possess 1.2M contact records, including emails and phone numbers.
- They say they obtained 245K carrier profiles containing EIN and SSN data.
- They allege access to 57K bank accounts, including routing numbers.
- They claim to have 334K live document URLs.
- They state they extracted 4.5M carrier registry entries from the MVMNT TMS.
- They say they also accessed systems belonging to several partners, including ALG Canada Inc, Line Transportation Inc, Maverick Acquisition Ventures Inc, Reliable Freight Solutions, and Rhode Sense.
- They demand $500,000 in BTC or XMR.
- They warn that they may contact partners and escalate pressure on employees if payment is not made.
- They provide contact details via email and Session for communication.
Disclaimer: This post is based on public claims made by the ransomware group "emperador". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.