The Wire
BusinessTechnologyCybersecurity

Emperador claims 3.9 GB from AB InBev, seeks bitcoin

Emperador claims 3.9 GB from AB InBev, seeks bitcoin
Photo: hln.be

Reports cite $1 million and $10 million demands; the listing remains unverified.

Why it matters: A confirmed breach could affect AB InBev's cloud systems, communications or supply chains. The available reports do not establish an intrusion, data exposure or operational disruption.

  • HackerFeeds records an Emperador listing dated October 25, 2026; that date is treated here as future-dated because the publication date is not provided.
  • Emperador claims 3.9 GB of data, including 3.2 GB of Azure cloud storage assets, 2,510 corporate emails and about 19,000 access logs.
  • Het Laatste Nieuws reported a $10 million bitcoin demand, while Rescana described a $1 million demand; the materials do not establish whether these refer to different stages or demands.
  • AB InBev has not publicly confirmed a breach or attack; Het Laatste Nieuws reported that the company declined to comment.

An actor using the name Emperador listed AB InBev as an alleged victim, according to the HackerFeeds tracker entry. HackerFeeds directly records the listing; it does not independently confirm the actor's claims. The original alleged leak-site entry was not provided in the materials. The listing is dated October 25, 2026, and the SEC record cited below is also 2026-dated. Because the publication date is not provided, both are identified as future-dated records rather than presented as current, independently verified events.

Emperador claims 3.9 GB of data, including 3.2 GB of Azure blob assets, or files stored in Microsoft's Azure cloud; 2,510 corporate emails; about 19,000 access logs; GBS portal records; internal PKI certificates, which can authenticate systems or encrypted connections; and 329,244 social-listening alerts, or monitoring records about online discussion. Access logs and certificates could matter because they may reveal system activity or enable trusted access if genuine. The figures and files remain unverified.

Rescana reported a $1 million ransom demand. Het Laatste Nieuws reported a $10 million bitcoin demand and said AB InBev declined to comment. The materials do not establish whether the two figures describe different stages of the alleged incident or separate demands.

AB InBev's 2025 figures, including $59.3 billion in net revenue, $21.2 billion in normalized EBITDA and approximately 137,000 employees, appear in the company's shareholder letter and regulatory filing. The cited filing also describes potential cyber-incident costs, operational or supply-chain disruption, and data, intellectual-property or regulatory losses.

No available material verifies an intrusion, the alleged data, payment, negotiations, publication of the data, customer or employee exposure, or operational impact.

By the numbers

  • 3.9 GB - total data volume claimed by Emperador
  • 3.2 GB - Azure cloud storage assets claimed by the actor
  • $1 million vs. $10 million - ransom figures reported by Rescana and Het Laatste Nieuws

Yes, but: The listing, data inventory and ransom amount remain unverified. AB InBev has not publicly confirmed an attack, and no operational disruption has been reported in the materials.

Based on reporting from

  • Het Laatste Nieuws

See how this story touches your network - open The Wire in Jane.

Open in Jane