Punta Shopping appears in Emperador claim

Emperador included Punta Shopping, a commercial organization based in Punta del Este, Uruguay, on its leak site, according to several ransomware intelligence sources. Those sources treated the claim as unverified, and there is still no public confirmation that an intrusion or exfiltration took place, or that the data mentioned is authentic.

What was reported about the alleged leak?

The sources reviewed agree that Emperador claimed a 1.6 GB file that supposedly contained personal and customer data tied to Punta Shopping. Ransomware.live repeated that attribution, while Cyber Threat Brief said the number of records, the exposed fields, and the authenticity of the file had not been confirmed.

Brandefense ATLAS also logged Punta Shopping’s appearance on Emperador’s leak site. In that case, the source itself notes that being listed there shows a claim by the group, but does not confirm that the intrusion or breach actually happened.

How was the case classified by other sources?

RecentBreaches reported that Emperador added Punta Shopping to its leak site on Oct. 31, 2026, and classified it as an unverified extortion claim. That coverage also said there was no public confirmation from the organization and no files exposed publicly.

Scrutex also included Punta Shopping among the victims attributed to Emperador during the week of Oct. 26 to Nov. 1, 2026. In its weekly report, the group appeared in a total of eight victims for that period, although the report did not provide independent confirmation of the case or additional details about the alleged file.