Files
16,000
Posted
Oct 21, 2026
Country
AR
Industry
Healthcare
Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshotBraincipher claims to have exfiltrated 16,000 files from clinicaromero.com, including patients in the psychiatric service, patients in the substance abuse treatment service, and staff medical records and internal correspondence. The leak is published as a countdown, with a deadline of October 31, 2026 at 11:00. ThreatCluster captured a screenshot of the leak post.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- clinicaromero.com
What was taken
Download: qvfgzg2yukem4ldat2zk6umidqbzydhf7au5ecfybp7d65av6q3jyjad.onion If you think you are here by mistake, please contact us at [email protected]
Data categories
medical recordsinternal correspondencepatient data
Leak site tags
Brain Cipher DataLeak
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.
ThreatCluster capture
The image features a logo with a stylized illustration of a man wearing glasses and a cardinal's hat, alongside the text "Clínica Monseñor Oscar A. Romero."
onion leak page101 KB
Negotiation
Email [email protected]