Skip to content
Leak-site post naming goldstarfinancial.com, captured by ThreatCluster

goldstarfinancial.com

braincipher

Ransomware leak-site victim intelligence · EN

Data size
over 10.5 GB
Files
10,300
Posted
Sep 23, 2026
Countdown
Deadline: September 29, 2026 at 05:33
Country
US
Industry
Financial Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The Brain Cipher group claims goldstarfinancial.com was breached, with over 10.5 GB across more than 10,300 documents. They list data categories including HR and recruitment records, financial and tax documents, documents containing SSNs, internal working materials, and agent contacts. The leak post is published, posted on 2026-09-17, and shows a countdown to September 29, 2026 at 05:33.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
goldstarfinancial.com

What was taken

Download: keoz3i32ljvnfrsxo3cwolzv2mhkvbi5y5wlwtn5ngbswu4qzdnjvrqd.onion If you think you are here by mistake, please contact us at [email protected]

Data categories
Lead SheetsCredit ReportsTax DocumentsIncome DocumentsDocuments Containing SSNsWorking MaterialsAgent Contacts
Leak site tags
DataLeak

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Leak happened on
09.17.26

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation