The listing named the employees

The new line on this listing is not the company name. It is the home phone.

A leak-site entry discovered 23 September, attributed to a group calling itself Emperador, names OnTrac and claims 197,000 employee records: names, hire dates, roles, home and mailing addresses, home phone, personal email, Facebook, LinkedIn. They put the size at 44.4 MB and the price at $1 million. If the company does not cooperate, the post says partners and employees will be targeted.

That is a claim. OnTrac has not confirmed this listing. It is also not the March incident BleepingComputer already reported, when OnTrac told customers that files were accessed between 20 and 22 March. Customer notices and an employee-table shakedown are different objects. Do not merge them because the logo matches.

What the column list does and does not prove

A list of field names is how a group shows it saw a header row, or how it shows it knows what an HR export looks like. It is not the export. “197,000” is a number on a page until someone has the file and finds a row that could only have come from that system.

The part that changes the weekend is the threat to go around the company. A listing aimed at the firm is a counsel problem. A listing that offers to call the employee at the home number is an exposure problem for the person, whether or not the archive is real.

If your name could be in that table

Do not pay a stranger who says they will delete you. Do not answer a call that already knows your hire date and your personal email. Ask the company, on a channel you already had, whether an employee export left — and keep that question separate from whatever they already notified customers about in the spring.

Until there is a file, you have a webpage and a threat to use the rows. Those are not the same fact. They are also not nothing.