Skip to content
Leak-site post naming sodali.com, captured by ThreatCluster

sodali.com

braincipher

Ransomware leak-site victim intelligence

Files
13,000
Posted
Oct 21, 2026
Countdown
⏳ Deadline: October 31, 2026 at 11:00
Country
US
Industry
Professional Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher claims it took 13,000 documents from sodali.com, including Annual Shareholders' Meetings documents for Swiss and German clients, issuer client corporate documents, voting schedules and results, reports from third-party proxy advisors, commercial proposals, pricing and strategies, and executive search materials for board candidates. The leak is listed as countdown, with a deadline of October 31, 2026 at 11:00. Victim profile identifies the domain sodali.com.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

13,000 documents include: Annual Shareholders' Meetings—Swiss and German Clients. A complete list of issuer clients, their corporate documents, voting schedules, and voting result...

Data categories
Annual Shareholders' Meetings dataissuer clients' corporate documentsvoting schedulesvoting resultsreports from third-party proxy advisors on clientscommercial proposalspricingstrategiesexecutive search materials for board candidates

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

If you think you are here by mistake, please contact us at brain.dataleak@cyberf
[email protected]

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "SODALI & CO" with a stylized design in orange and white on a dark background.
onion leak page20 KB

Negotiation