Summary
Written by ThreatClusterfrom victim profile, leak post, screenshot, ransom noteBraincipher claims to have obtained more than 200 database backups belonging to icot.es and states it will publish them. The leak page shows a countdown to a deadline of September 12, 2026 at 13:00 and includes a demo download link. The victim identified in the leak is the icot.es domain; the status is countdown, indicating publication at the stated deadline.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- icot.es
What was taken
Download: h4zmek6bf3lebauy7dtyxmui67n6ro5t4zdrooddpw3kyfktg2nmhgid.onion If you think you are here by mistake, please contact us at [email protected]
Ransom note
Published by the group on their leak site, reproduced verbatim.
If you use this hosting service, we have some bad news for you. We'll soon be publishing more than 200 database backups that belong to you. Demo download: h4zmek6bf3lebauy7dtyxmui67n6ro5t4zdrooddpw3kyfktg2nmhgid.onion ⏳ Deadline: September 12, 2026 at 13:00
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.