Skip to content
Leak-site post naming srsnodgrass.com, captured by ThreatCluster

srsnodgrass.com

braincipher

Ransomware leak-site victim intelligence

Data size
100GB, 45,000 documents
Files
45,000
Posted
Oct 21, 2026
Countdown
⏳ Deadline: October 31, 2026 at 11:00
Country
US
Industry
Professional Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Braincipher states it exfiltrated 100GB of data from the victim domain srsnodgrass.com, comprising about 45,000 files. They describe the material as financial statements and pre-audit working papers, lists of bank employees, insider information on the financial condition of around 20 banks, nonprofit financial data, federal grant statements, and income tax returns of Head Start employees and participants. The leak post is in countdown status with a deadline of October 31, 2026 at 11:00.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
srsnodgrass.com

What was taken

Download: 7dfw4p3pzo3zlcy5hzm7y43z3kfke2rhd3eudncmvknwhsqqvseadkad.onion If you think you are here by mistake, please contact us at [email protected]

Data categories
financialsHR recordstax records
Leak site tags
Brain Cipher DataLeak

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
If you think you are here by mistake, please contact us at [email protected]
contact_email
[email protected]

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Swedgrass" with a stylized design, predominantly in white.
onion leak page104 KB

Negotiation

Onion 7dfw4p3pzo3zlcy5hzm7y43z3kfke2rhd3eudncmvknwhsqqvseadkad.onion