Skip to content
Leak-site post naming northeastrehab.com, captured by ThreatCluster

northeastrehab.com

braincipher

Ransomware leak-site victim intelligence · EN

Files
13,000
Posted
Sep 29, 2026
Countdown
⏳ Deadline: October 13, 2026 at 13:00
Country
US
Industry
Healthcare

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher claims to have stolen 13,000 files from northeastrehab.com, including patient records, clinical documentation, billing sheets, financial audits and IT department materials. The leak post is listed on the group’s site and shows a countdown deadline of October 7, 2026 at 13:00. ThreatCluster captured a screenshot of the leak post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
northeastrehab.com

What was taken

Download: ao63qafejccvb2fdfn5vb7dxaeptxnyroktllnxhzh4ru3df26wivoid.onion If you think you are here by mistake, please contact us at [email protected]

Data categories
patient recordsclinical documentationbilling sheetsfinancial auditsIT department materials

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

deadline_text
⏳ Deadline: October 7, 2026 at 13:00

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of the Northeast Rehabilitation Hospital Network, featuring the initials "NRH" in a stylized font above the full name.
onion leak page15 KB

Negotiation