Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Phoenix S&S GmbH

phoenix-s-s.de

Phoenix S&S GmbH was listed on the Emperador leak site on Oct 24, 2026. Information as of Oct 25, 2026.

Country: GermanyIndustry: Consulting
Updated continuously · figures as of Oct 25, 2026
Claimed by
Emperador
First listed
Oct 24, 2026
Claims recorded
1

Leak-Site Claim.

EmperadorConfirmed claim
Posted on the leak site
Oct 24, 2026
Collected by Brandefense
Oct 24, 2026
Data claimed
2 GB
Leak-site post text, written by the group
German company from Frankfurt am Main, which deals with building maintenance, construction services, logistics and security. Archived personal and corporate data of employees and customers. Here are the most important documents. Publication scheduled: [removed]:42:05 UTC Size: 2.0 GB Sectors: Manufacturing, Finance, Transportation

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Frommann Energie GmbH
frommann-energie.de
EmperadorDEGermanyEnergy and Utilities1 GB
JS Constructor, INC
jscon.com.ph
EmperadorUSUnited StatesManufacturing153 GB
B2Chat
b2chat.io
EmperadorCOColombiaTechnology70.5 MB
Bruin Group LLC
proton.me
EmperadorUSUnited StatesUnknown119 MB
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
Luzco Ilumination
luzco.es
EmperadorESSpainEnergy and Utilities1.4 GB
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
zhservices.com
zhservices.com
KrybitUSUnited StatesConsultingNot stated
Miljaus Producciones S.L (
miljaus.com
QilinESSpainConsultingNot stated
Aerotop
aerotop.cl
QilinCLChileConsultingNot stated
Penco Products
pencoproducts.com
The GentlemenUSUnited StatesConsultingNot stated
EMARKETER
emarketer.com
FulcrumsecUSUnited StatesConsultingNot stated
Red Oak Technologies
redoaktech.com
The GentlemenUSUnited StatesConsultingNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 25, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.