Skip to content
Leak-site post naming maxwell-group.com, captured by ThreatCluster
Back to victims

maxwell-group.com

braincipher

Ransomware leak-site victim intelligence

Data size
over 115 GB
Files
150,000
Posted
Sep 29, 2026
Countdown
⏳ Deadline: October 16, 2026 at 16:00
Country
GB
Industry
Other

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher claims Maxwell-group.com is the victim, with over 115 GB of data across about 150,000 files said to have been taken. The data set reportedly covers financial statements, budgets and forecasts; bank accounts and reconciliations; corporate cards; taxes and payroll; PHI and medical records; employees’ personal documents; strategic M&A information; debt facility agreements; and state licenses and cost reports. The leak post states publication status as listed, with a countdown to October 7, 2026 at 13:04.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

We have over 115 GB of data — 150k files and documents. If you think you are here by mistake, please contact us at [email protected] ⏳ Deadline: October 16, 2026 at 16:00

Data categories
Corporate financial statementsBudgetsForecastsBank accounts and reconciliationsCorporate credit card dataTaxes and payroll (990s, W-2, tax documents, commissions)PHI: Medicaid/Medicare billing, medical records, therapy notes, incident reports with nurse's notesEmployees personal documentsStrategic M&A information (transactions, valuations, due diligence)Debt facility agreements with investorsState licensesCost Reports

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "MAXWELL GROUP, INC." with a stylized design emphasizing the "X" in "MAXWELL."
onion leak page432 KB

Negotiation
Email [email protected]