About
Written by ThreatCluster from 2 storiesbraincipher is a ransomware group whose operations involve ransomware attacks that have claimed 69 victims across multiple sectors. Victims span Technology, Business Services, Manufacturing, Healthcare, and Professional Services, with the most affected countries being the United States, France, Canada, Spain, and the United Kingdom. Recent reporting shows a pattern of cross-sector targeting, illustrated by the September 18, 2026 incident at AECOM where about 1.22 terabytes of data were compromised. Overall, the set of reported activity points to a broad Western footprint across the identified sectors, rather than a concentration in a single industry or country.
Sectors: Technology, Manufacturing, Business Services · Countries: US, FR, CA
Recent victims
View all →| Victim | Sector | Country | Data | Files | Posted | Status |
|---|---|---|---|---|---|---|
| huntcompanies.com huntcompanies.com | Not Found | US | We have 80 GB of data. | — | Oct 11, 2026 | published |
| latitudesubro.com latitudesubro.com | Manufacturing | BR | approximately 50 GB | — | Sep 29, 2026 | published |
| trailerbridge.com trailerbridge.com | Transportation | US | — | 76,200 | Sep 29, 2026 | published |
| mccordclaims.com mccordclaims.com | Healthcare and insurance | US | — | 78,400 | Sep 29, 2026 | published |
| goriteway.com goriteway.com | Not Found | US | 20.5 GB | — | Sep 29, 2026 | published |
| northeastrehab.com northeastrehab.com | Healthcare | US | — | 13,000 | Sep 29, 2026 | published |
| mulholland.com mulholland.com | E&P | US | over 100 GB | 110,900 | Sep 29, 2026 | published |
| wildmanbg.com wildmanbg.com | Other | BG | over 80 GB | 350,000 | Sep 29, 2026 | published |
| maxwell-group.com maxwell-group.com | Other | GB | over 115 GB | 150,000 | Sep 29, 2026 | published |
| goldstarfinancial.com goldstarfinancial.com | Financial Services | US | over 10.5 GB | 10,300 | Sep 23, 2026 | published |
| hoyletanner.com hoyletanner.com | Professional Services | GB | — | 33,500 | Sep 17, 2026 | published |
| aecom.com aecom.com | Professional Services | US | 670 GB | — | Sep 17, 2026 | countdown |
| xpera.ca xpera.ca | Technology | CA | 20 GB | — | Sep 17, 2026 | published |
| icot.es icot.es | Technology | ES | — | — | Aug 31, 2026 | published |
| aeiconsultants.com aeiconsultants.com | Professional Services | US | over 55 GB | 35,000 | Aug 31, 2026 | published |
| syc.es syc.es | Technology | ES | over 40 GB | 57,000 | Aug 31, 2026 | published |
| Adviesbureau De Beuckelaer BV | Professional Services | NL | over 150 GB | 415,000 | Aug 31, 2026 | published |
| ahadandco.com ahadandco.com | Other | AE | over 300 GB | 405,000 | Aug 31, 2026 | published |
| sago.com sago.com | Technology | — | — | Aug 31, 2026 | countdown | |
| crmeyer.com crmeyer.com | Professional Services | DE | over 330 GB | 275,000 | Aug 31, 2026 | published |
| ccsperfusion.com ccsperfusion.com | Healthcare | US | over 200 GB | 306,000 | Aug 31, 2026 | countdown |
| windiam.com windiam.com | Technology | BE | over 250 GB | — | Jul 22, 2026 | published |
| robroy.com robroy.com | Manufacturing | US | — | — | Jul 9, 2026 | published |
| iac-intl.com iac-intl.com | Business Services | US | 1050 GB | — | Jul 9, 2026 | published |
| digitaldynamics.com digitaldynamics.com | Technology | US | — | — | Jul 1, 2026 | published |
Found by ThreatCluster
86 total from our crawlListed on this group's leak site and not present in the aggregated feeds.