Skip to content
Leak-site post naming prosomnus.com, captured by ThreatCluster

prosomnus.com

braincipher

Ransomware leak-site victim intelligence

Data size
100GB
Files
78,000
Posted
Oct 21, 2026
Countdown
⏳ Deadline: October 31, 2026 at 11:00
Country
US
Industry
Healthcare

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher claims to have stolen about 100 GB across 78,000 files from prosomnus.com. The leak post states the data includes PHI, a Kaiser Permanente Patient-Partner Tracking Sheet, and non-public FDA regulatory files, with sample filenames .bak and .pst. The publication status is a countdown, with a deadline of October 31, 2026 at 11:00, and prosomnus.com is listed as the victim domain.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
prosomnus.com

What was taken

Contents: Patients' PHI; Kaiser Permanente Patient-Partner Tracking Sheet; Non-public FDA regulatory files; .bak; .pst.

Data categories
Patients' PHIFDA regulatory files
Leak site tags
PHIKaiser PermanenteFDARegulatory
File types seen
bak × 1pst × 1
Sample files (2)
.bak
.pst.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

note
Contents: Patients' PHI; Kaiser Permanente Patient-Partner Tracking Sheet; Non-public FDA regulatory files; .bak; .pst.
deadline_text
Deadline: October 31, 2026 at 11:00
size_and_file_count
100GB, 78,000 files
If you think you are here by mistake, please contact us at brain.dataleak@cyberf
[email protected]

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation