Skip to content
Leak-site post naming hoyletanner.com, captured by ThreatCluster

hoyletanner.com

braincipher

Ransomware leak-site victim intelligence · EN

Files
33,500
Posted
Sep 17, 2026
Countdown
Deadline: September 25, 2026 at 13:00
Country
GB
Industry
Professional Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher claims to have stolen 33,500 files from hoyletanner.com, including contracts and agreements, the customer database, HR records, tax forms, invoices, payroll, and infrastructure plans. The leak post is in countdown status, with a published deadline of September 25, 2026 at 13:00. The page identifies hoyletanner.com as the victim domain and states the data set comprises the above items as claimed by the group.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
hoyletanner.com

What was taken

We have 33,500 (33.5k) files, the contents of which include: Contracts and agreements; Commercial proposals; Invoices; Customer database; HR ; W-9 tax forms; ACH/banking documents;...

Data categories
Contracts and agreementsCommercial proposalsInvoicesCustomer databaseHRW-9 tax formsACH/banking documentsPayrollTaxesInsuranceAccount informationInfrastructure plans and drawingsDrone aerial photography

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "HOYLE TANNER" alongside a stylized graphic with black, green, and blue elements.
onion leak page1.9 MB

Negotiation