Emperador Claims Theft of 3.9GB of AB InBev Data, Demands $1 Million

The Emperador ransomware group claims to have stolen 3.9GB of data from AB InBev, the brewer behind Budweiser and Corona, and is demanding $1 million in Bitcoin. The claim, discovered on October 25, 2026, alleges the collection includes social-listening alerts, corporate emails, access logs, GBS portal records, internal PKI certificates, and 3.2GB of Azure Blob assets. The alleged breach remains unverified, and no company confirmation was reported.

The available reporting does not establish ransomware deployment, operational disruption, the number of affected people, or continued attacker access to AB InBev systems. It also does not establish that private keys or cloud credentials were compromised, and the mention of Azure-hosted assets does not demonstrate a Microsoft platform breach. Verification priorities include authenticating the records, establishing their ownership, age, and source, and determining the scope and impact of any unauthorized access.