Ransomware Group intelligence

BrainCipher

Active

Track BrainCipher with 95 published victims and 32 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 95 Known published victims in this dataset
First discovered 2024-07-01 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 11 days Days since the latest known victim
Top country United States 31 victims
Known locations 32 Leak or negotiation infrastructure tracked

Overview

BrainCipher is tracked by Breach House as a ransomware group with 95 published victims.

United States is currently the most targeted country in this dataset.

32 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 19 90.5%
  • Pending 1 4.8%
  • Deleted 1 4.8%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (32)

    Label Type Availability Links
    Leak location 32 Onion service Up checked 3h ago zijgmuqjzb6dc7pofxhtaiz36qqyg35lhutybmzaz6whzgei2casjgid.onion
    Leak location 31 Onion service Up checked 3h ago zfpcqpp6kfe5wl72b2cfb5qbp4kkzi4oj6if4r226idr3efvtocgd6id.onion
    Leak location 29 Onion service Up checked 3h ago urvvoj7wlkh476p2tgntzez3nuke2ylfdkekpnkajxfz43o7jqkokeyd.onion
    Leak location 27 Onion service Up checked 3h ago rpoeu7zimfpwxbwmjmjyprqaprtvkj3ykfczhbc4x3voydopffn337id.onion
    Leak location 26 Onion service Up checked 3h ago psv5ejeysrncs6ltu4pkjyazswcmw3atmxi4eg44a6luudin5ufchcqd.onion
    Leak location 24 Onion service Up checked 3h ago mejouwrwja4iou7myj34rqi7cixyhn7vsa42e2n2dhxzc5mmkiaki3yd.onion
    Leak location 25 Onion service Up checked 3h ago nxetaioe4eelwhdwagi3ikv6ee6tttwvnqikalgkrslz7bwvuwqzdeqd.onion
    Leak location 23 Onion service Up checked 3h ago ltxnzpfvmr3c3rcbw5x4q2ejy6fmbp7kc35oql3gooyydg7belfmnyad.onion
    Leak location 22 Onion service Up checked 3h ago lhsxojxowgtwdqlryl72d2v5cpgqv3sll4d47yyqdisersigvfbl5uid.onion
    Leak location 21 Onion service Up checked 3h ago kxlw35vctxgbmwtz6474xwtkm2kywifg4efs6ixmvgdgbgi2uaurenid.onion
    Leak location 18 Onion service Up checked 3h ago guonv3yxlb5t7mptz2cwxsqrsnmsocrufkz3z3nvuv45h66submxe4yd.onion
    Leak location 19 Onion service Up checked 3h ago hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion
    Leak location 17 Onion service Up checked 3h ago emdnfl2fv32jhssxcbxlo6dzg2at4d7qbw2md6inz63qzdfgyln5cwyd.onion
    Leak location 16 Onion service Up checked 3h ago dkeqrg3fxrijolpgpbsmk6eacare4bg5awrracxdiestki2onyz5bnyd.onion
    Leak location 14 Onion service Up checked 3h ago aj3ocrawf43r6u5miezvmzh5sjtuv2rx6na3tm26fao3laobu5unfhyd.onion
    Leak location 13 Onion service Up checked 3h ago a4vbe7yp4kluped6khuhpr5nmzshiimx2jt5j22ozriiq6ngsm3fcpyd.onion
    Leak location 12 Onion service Up checked 3h ago 7n4vqiaqxenaqy4t47ayqvurbmg6vfg2ir7iobwjazwizjncwyt7jhad.onion
    Leak location 11 Onion service Up checked 3h ago 6ft2dfh26wm3w44orpjcgviutvfp25ez2iyh5ego5egvfmifrws7vvqd.onion
    Leak location 10 Onion service Up checked 3h ago 3frnhzcnlkjnw5q3tm6elzizinm2k3bmrtf2xwqjzpcxzeqwn2tv6wyd.onion
    Leak location 9 Onion service Up checked 3h ago 3fg2gfwrdks46drwvejpgpak5klrflclsjjo35dxtqfk3poeez6oezad.onion
    Leak location 1 Onion service Up checked 3h ago vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion
    Leak location 30 Onion service Down checked 3h ago x3nb7qcygpem2j5xzstyzdtgzofzkwkx4eko3ug4r73i6uhcgvyffjyd.onion
    Leak location 28 Onion service Down checked 3h ago upiqcdsgvh6v5owteasjzyxbj2xug574dj4fctthehd7zjq7wmuxbwqd.onion
    Leak location 20 Onion service Down checked 3h ago inzk64xcf3sm6qzkehmio7piwhkslhnab3rlviniyg7alcgsxvy7kcyd.onion
    Leak location 15 Onion service Down checked 3h ago alkkq3vhb7epl3jh6qzutj2vyyfdgvs2nukw5hwdsijl5la3jrinrryd.onion
    Leak location 7 Onion service Down checked 3h ago cuuhrxbg52c5agytmtjpwfu7mrs4xtaitc4mukkiy2kqdxeqbcmuhaid.onion
    Leak location 8 Onion service Down checked 3h ago p6wmotxzvg34tdmpwm4beqgrcyp5iys43snkccsahnw74la3k3xx6pad.onion
    Leak location 6 Onion service Down checked 3h ago 77nrxelcwh47yikvpaz2rvtsten4sen2elybo5r5st6wlxsbitv255qd.onion
    Leak location 5 Onion service Down checked 3h ago 4ldgw2wuidqu5ef3rzx4byonf3y7rdnh43jiw2z4sbtjiwic6gkov7yd.onion
    Leak location 4 Onion service Down checked 3h ago zktnif5vckhmz5tyrukp5bamatbfhkxjnb23rspsanyzywcrx3bvtqad.onion
    Leak location 3 Onion service Down checked 3h ago brain4zoadgr6clxecixffvxjsw43cflyprnpfeak72nfh664kqqriyd.onion
    Leak location 2 Onion service Down checked 3h ago mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion

    Top Activity Sectors (13)

    Victims (95)

    Search, filter and paginate the victim timeline for BrainCipher. Showing 1–95 of 95.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware icot.es id32358 View details Spain IT pending
    Ransomware icot.es id32358 View details Spain IT pending
    Ransomware aeiconsultants.com id32359 View details United States Services leaked
    Ransomware aeiconsultants.com id32359 View details United States Services leaked
    Ransomware syc.es id32360 View details Spain Finance / Legal / Insurance leaked
    Ransomware syc.es id32360 View details Spain Finance / Legal / Insurance leaked
    Ransomware Adviesbureau De Beuckelaer BV id32361 View details Netherlands Services leaked
    Ransomware Adviesbureau De Beuckelaer BV id32361 View details Netherlands Services leaked
    Ransomware ahadandco.com id32362 View details United Arab Emirates Services leaked
    Ransomware ahadandco.com id32362 View details United Arab Emirates Services leaked
    Ransomware sago.com id32363 View details United States IT deleted
    Ransomware sago.com id32363 View details United States IT deleted
    Ransomware crmeyer.com id32364 View details Germany Services leaked
    Ransomware crmeyer.com id32364 View details Germany Services leaked
    Ransomware ccsperfusion.com id32365 View details United States Healthcare / Pharma leaked
    Ransomware ccsperfusion.com id32365 View details United States Healthcare / Pharma leaked
    Ransomware windiam.com id30757 View details IT leaked
    Ransomware windiam.com id30757 View details IT leaked
    Ransomware windiam.com id30757 View details Belgium IT leaked
    Ransomware robroy.com id30380 View details United States Manufacturing / Engineering leaked
    Ransomware robroy.com id30380 View details United States Manufacturing / Engineering leaked
    Ransomware iac-intl.com id30381 View details United States Manufacturing / Engineering leaked
    Ransomware iac-intl.com id30381 View details United States Manufacturing / Engineering leaked
    Ransomware digitaldynamics.com id30160 View details United States IT leaked
    Ransomware digitaldynamics.com id30160 View details United States IT leaked
    Ransomware goldenstateortho.com id30161 View details United States Healthcare / Pharma leaked
    Ransomware goldenstateortho.com id30161 View details United States Healthcare / Pharma leaked
    Ransomware printronix.com id30162 View details United States Manufacturing / Engineering
    Ransomware printronix.com id30162 View details United States Manufacturing / Engineering
    Ransomware paipharma.com id30136 View details Brazil Healthcare / Pharma leaked
    Ransomware paipharma.com id30136 View details Brazil Healthcare / Pharma leaked
    Ransomware eggetttax.ca id30099 View details Canada Finance / Legal / Insurance leaked
    Ransomware sterlinggloballtd.com id30100 View details United Kingdom Finance / Legal / Insurance leaked
    Ransomware themintgaming.com id30005 View details IT leaked
    Ransomware alu-rex.com id29918 View details Austria Manufacturing / Engineering leaked
    Ransomware anglomoil.com id29923 View details United Kingdom leaked
    Ransomware squamish.net id29543 View details Canada IT leaked
    Ransomware sheppadviser.com.au id29304 View details Australia Other leaked
    Ransomware ice.org.uk id29062 View details United Kingdom Construction / Real Estate
    Ransomware flbgroup.com id28382 View details United Kingdom Manufacturing / Engineering
    Ransomware kisnet.co.jp id28383 View details Japan IT
    Ransomware nwlr.ca id28384 View details Canada Transportation / Travel / Logistics
    Ransomware liteline.com id28385 View details United States Manufacturing / Engineering
    Ransomware westonconsulting.com id28386 View details United States Construction / Real Estate
    Ransomware exceldor.ca id28387 View details Canada Agriculture / Food
    Ransomware soundinsurance.ca id28388 View details Canada Finance / Legal / Insurance
    Ransomware endeavourautomotive.co.uk id28389 View details United Kingdom Retail / E-commerce
    Ransomware eworldme.com id28390 View details United Arab Emirates IT
    Ransomware bridgeway-consulting.co.uk id28391 View details United Kingdom Transportation / Travel / Logistics
    Ransomware fsbgroup.ca id23495 View details Canada Services
    Ransomware semag.fr id23494 View details France Other
    Ransomware axxia.fr id23493 View details France Other
    Ransomware oxfordcounty.ca id23238 View details Canada Public Sector
    Ransomware cdom.org id23237 View details United States Other
    Ransomware bmsi.org id22432 View details United States Other
    Ransomware bw-lv.de id21518 View details Germany Other
    Ransomware VIRTUALWEB.US id21409 View details United States Other
    Ransomware jorgefernandez.es id21369 View details Spain Communication / Marketing
    Ransomware Pulmonary Physicians of South Florida Clinics | Data security breach! id19736 View details United States Healthcare / Pharma
    Ransomware Pulmonary Physicians of South Florida Clinics id19739 View details United States Healthcare / Pharma
    Ransomware neatem.fr | Update! id19735 View details France Other
    Ransomware neatem.fr id19738 View details France Other
    Ransomware mbmdubai.com id19734 View details United Arab Emirates Other
    Ransomware ddecor.com id19733 View details India IT
    Ransomware ruizre.es id19732 View details Spain Construction / Real Estate
    Ransomware soundtransit.org id19731 View details United States Communication / Marketing
    Ransomware valedolobo.com id19730 View details Portugal Hospitality / Food & Beverage / Tourism
    Ransomware edisoft.es id19729 View details Spain Services
    Ransomware iycsa.com.co id19728 View details Colombia Other
    Ransomware Rhode Island Department of Humain Services id16290 View details United States Services
    Ransomware Modern Dental Group Limited id16157 View details Hong Kong Healthcare / Pharma
    Ransomware Estar Seguros, S.A. id16002 View details Mexico Communication / Marketing
    Ransomware Cristal y Lavisa S.A. de C.V. id16001 View details Mexico Communication / Marketing
    Ransomware Deloitte UK id15858 View details United Kingdom Services
    Ransomware Royce Corporation id15810 View details United States Manufacturing / Engineering
    Ransomware G-ONE AUTO PARTS DE MÉXICO, S.A. DE C.V. id15797 View details Mexico Manufacturing / Engineering
    Ransomware COOPERATIVA TELEFONICA DE CALAFATE LTD. id15290 View details Argentina Communication / Marketing
    Ransomware G-One Auto Parts de México S.A. de C.V. id15289 View details Mexico Manufacturing / Engineering
    Ransomware Berridge Manufacturing Co. id15033 View details United States Manufacturing / Engineering
    Ransomware K&S Tool & Mfg Co. id15030 View details United States Services
    Ransomware Basilio Advogados id15029 View details Brazil Finance / Legal / Insurance
    Ransomware CHRISTODOULOS G. VASSILIADES & CO. LLC id15028 View details Cyprus Finance / Legal / Insurance
    Ransomware hanwa.co.th id14409 View details Thailand Manufacturing / Engineering
    Ransomware rmn.fr id14045 View details France Communication / Marketing
    Ransomware ghanare.com id14043 View details Ghana Communication / Marketing
    Ransomware beinlaw.co.il - Prof. Bein & Co. id13934 View details Israel Finance / Legal / Insurance
    Ransomware tiendasmacuto.com id13869 View details Venezuela, Bolivarian Republic of Retail / E-commerce
    Ransomware fabamaq.com id13794 View details Argentina Other
    Ransomware cyceron.fr id13793 View details France Other
    Ransomware Sherbrooke Metals id13464 View details United States Manufacturing / Engineering
    Ransomware Apex Global | Big leak outlooks - 2tb. id13463 View details Netherlands Services
    Ransomware Cole Technologies Group id13462 View details United States IT
    Ransomware Family Wealth Advisors Ltd. id13461 View details Israel Services
    Ransomware Mars 2 LLC id13460 View details United States Services
    Ransomware Indonesia Terkoneksi id13220 View details Indonesia Other