Ransomware group emperador hits MAA Group Consulting Engineers
MAA Group Consulting Engineers — a professional services target has been listed by the emperador ransomware group on 2026-10-29. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | MAA Group Consulting Engineers |
|---|---|
| Threat Group | emperador |
| Summary | MAA Group Consulting Engineers, a professional services organization, was listed by the emperador ransomware group on its leak site on 2026-10-29. |
| Date of Breach | 2026-10-29 |
| Discovery Date | 2026-10-29 |
| Region | — |
| Target Domain | — |
| Business Sector | Professional Services |
| Severity | MEDIUM |
Claim by emperador
MAA Group Consulting Engineers is a leading regional engineering and consulting service provider founded in 1975, with over 1,000 professionals operating across East and Southeast Asia. The group provides comprehensive integrated solutions—ranging from conceptual planning and engineering design to project management—across infrastructure, buildings, land resources, environment, and information technology. Renowned for its industry-leading expertise in Building Information Modeling (BIM), MAA Group has successfully completed major high-speed rail, mass rapid transit (MRT), and tunnel projects throughout Taipei, Hong Kong, Bangkok, and Singapore. The client data and internal documents you’ve leaked go well beyond what you’ve seen here. We have taken several terabytes of files—this is just a small sample. In fact, we have obtained sensitive documents pertaining to virtually all of your clients. Warning: You have 3 days to enter negotiations. Once the deadline passes, the negotiation window will be permanently closed and all exfiltrated data will be published. Additionally, the encrypted data will be rendered completely unrecoverable. sample files: https://mega.nz/file/CgxxTKCZ#PzGFlZt67HDF2oLsP4jn_W_QdrquHJpNAfVm-jXGYxo https://mega.nz/file/2ogzwAyY#r8F31SFQTqyW6bzQA-e8HNzgw-rEW_gn7fhwY5TAByg https://mega.nz/file/2gIRXQwY#-4IzU70FjqvSYotZoaJuod_H2P5sXoGTvsja9Patte0 https://mega.nz/file/alQU0JaT#2GgaPb1Z-z1xB1FfAd_NohXbfkbfRfhfZ_OwtxPd0cc [Sector: Construction]
Posted by the emperador threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Leak post (onion / Tor)
http://emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion/post/maa-group-consulting-engineers/
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.