2026 OnTrac — Emperador leak-site claim; ~197k employee PII records (unverified)
Data compromised
Actor claim (unverified): ~197k employee records / 44.4 MB including names, phones, emails, addresses, hire/termination, roles, legal entity, social links, auth flags. $1M demand. Distinct from OnTrac’s verified March 2026 customer-file intrusion. No company confirmation of this listing.
Technical writeup
Unverified leak-site / extortion claim — Emperador listing for OnTrac observed September 23, 2026 (Ransomware.live). Actor claims full employee database (~197k PII rows) and $1M ransom. OnTrac confirmation of this Emperador claim not located at indexing. Catalog separately from verified ontrac-network2026 (March customer notices). recordsAffected 197000 (unverified); companyConfirmed false.
Root cause
Unverified Emperador ransomware/extortion leak-site listing (Sep 23, 2026)