Skip to content
Leak-site post naming hhjcpa.com, captured by ThreatCluster

hhjcpa.com

braincipher

Ransomware leak-site victim intelligence · EN

Data size
180,500 files with a total size of over 305GB, including: SS
Files
180,500
Posted
Nov 4, 2026
Publication
Nov 18, 2026
Countdown
Deadline: November 18, 2026 at 15:00
Country
US
Industry
Professional Services

Summary

Written by ThreatClusterfrom victim profile, leak post

The leak claims hhjcpa.com data totaling over 305GB across 180,500 files, including SSNs, EINs, bank account information and complete tax returns. It also references accounting records and payroll data for clients' employees. The publication status is countdown, and the leak page identifies the victim as the domain hhjcpa.com.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
hhjcpa.com

What was taken

180,500 files with a total size of over 305GB, including: SSN, EIN, bank account information, and complete tax returns; accounting records and payroll data for clients' employees; ...

Data categories
PIIFinancial dataTax dataAccounting recordsPayroll data
Leak site tags
Brain CipherDataLeak

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of "Harris, Hardy & Johnstone, P.C." with the text "Certified Public Accountants."
onion leak page77 KB