Leak-site post naming goldenstateortho.com, captured by ThreatCluster

goldenstateortho.com

braincipher

Ransomware leak-site victim intelligence

Data size
more than 150 GB
Posted
Jul 1, 2026
Country
US
Industry
Healthcare

Summary

Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot

Brain Cipher states they took a sample from goldenstateortho.com, publishing a single onion file named hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion. The leak post identifies the victim domain as goldenstateortho.com and notes the taken item as an onion file (x1). It also provides a download link for the onion file and a contact notice with the email [email protected]. The publication status on the leak page is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
goldenstateortho.com

What was taken

Download: hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion If you think you are here by mistake, please contact us at [email protected]

Leak site tags
Brain Cipher DataLeak
File types seen
onion × 1
Sample files (1)
hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download
hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion
download_link
hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion
contact_notice
If you think you are here by mistake, please contact us at [email protected]

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation