Brain Cipher

Active
Also tracked as BrainCipher
71 victims named on the leak site
0 in the last 30 days
30 in the last 12 months
Jul 2024 first victim we recorded
Jul 10, 2026 most recent victim posted
22 leak sites tracked

Data as of August 16, 2026.

Credential exposure before the attack

25.4% of Brain Cipher victims whose domain we can identify (18 of 71) had employee credentials leak in the 12 months before Brain Cipher named them as a victim.

We don't know whether any of these credentials were how Brain Cipher gained initial access.

What industries Brain Cipher targets

Sector identified for 49 of 71 victims.

Manufacturing11
Financial Services7
Construction5
Technology4
Healthcare4
Automotive3
Legal3
Agriculture2

Where the victims are located

Country identified for 46 of 71 victims.

United States10
Canada9
France5
United Kingdom4
Spain3
Australia2
Israel2
Mexico2

Most recent Brain Cipher victims

VictimSectorCountryPosted
Industrial Accessories iac-intl.comManufacturingUnited StatesJul 10, 2026
Robroy Industries robroy.comManufacturingUnited StatesJul 10, 2026
Digital Dynamics digitaldynamics.comManufacturingUnited StatesJul 2, 2026
Golden State Orthopedics & Spine goldenstateortho.comHealthcareUnited StatesJul 2, 2026
Printronix printronix.comManufacturingUnited StatesJul 2, 2026
PAI Pharma paipharma.comHealthcareUnited StatesJul 1, 2026
Eggett Tax Services eggetttax.caFinancial ServicesCanadaJun 23, 2026
Sterling Global Financial sterlinggloballtd.comFinancial ServicesNot identifiedJun 23, 2026
The Mint Gaming Hall themintgaming.comNot identifiedUnited StatesJun 22, 2026
Alu-Rex alu-rex.comManufacturingCanadaJun 16, 2026
Anglomoil anglomoil.comManufacturingAustraliaJun 16, 2026
Squamish Nation squamish.netNot identifiedNot identifiedJun 2, 2026
The Sheppard Advisory sheppadviser.com.auFinancial ServicesAustraliaMay 22, 2026
The Institution of Civil Engineers ice.org.ukEducationUnited KingdomMay 12, 2026
Bridgeway Consulting bridgeway-consulting.co.ukConstructionUnited KingdomApr 27, 2026
Endeavour Automotive Group endeavourautomotive.co.ukAutomotiveUnited KingdomApr 7, 2026
Easy World Automation eworldme.comNot identifiedUnited Arab EmiratesApr 7, 2026
Sound Insurance Services soundinsurance.caFinancial ServicesCanadaApr 7, 2026
Liteline liteline.comManufacturingCanadaMar 6, 2026
Weston Consulting westonconsulting.comNot identifiedCanadaMar 6, 2026

Showing the 20 most recent of 71. Browse recent data breaches for more.

Brain Cipher leak sites

Addresses we've seen Brain Cipher publish victims from. Any .onion address needs the Tor Browser.

  • vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion
  • i6b4r6blgmm3r62zj42qxn6bvcbcrslcg6b6uwqws6xhnxz2howbhkid.onion
  • oe7kcuvnulmdzir6zkewv5p353kc7qjf5tyqxfxabhzsm26pji44elqd.onion
  • yt7beb7fj6xbh4dndrlyvl3gn4ck36qn2oqheiqjs4bp3wspj3wgpcad.onion
  • hdgfvxxkepllbvqvk7vrudgwq55tg4joo4xpajaa3nv5gzpake66bnid.onion
  • ubetdhmgnry4jk7ya7gh7p4hm4c3c57srkw62oc6hjmvvvkrqeybjjid.onion
  • q226mkoikzgyu33jin7ox3qo6tea7yhlgz52p5lslpj73edtocsz4wqd.onion
  • zv27q4tjvqxelm2imgztfg7gtl3v56oqabe77hiufqoqilis2dgcdsad.onion
  • jgkgqztfmwk53wlttsjo6i3nmwtzoch2oi2bocqzb4zmp6kfspuiaead.onion
  • lhdv4ydjx5idzvntdrmcbwsh3dhdi3ww5hoz3ws2d5q5jlfewdacx4qd.onion
  • 4ldgw2wuidqu5ef3rzx4byonf3y7rdnh43jiw2z4sbtjiwic6gkov7yd.onion
  • ixvarmokkir6t6fzpn7prussp3ulys66aeivrhcvrmfowqi2gi2fgryd.onion
  • mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion
  • tahr6kwobsi7fj5j3hoyzxr34ipyiyuv2svhteht5td4etq23bcx7tyd.onion
  • ncyg34lipi3w2u7yvxl3swr6wj6lsoeix3grrdsn6nmcv4r7vntanoid.onion
  • 7xen2nsp66c3wutvznjffbde52n4tabrnjw7zp3yyc2vs7ovh2ndhrad.onion
  • bgpeqy3d5svuikeaueitix6zosg3pzekw77viulnucsiqsn4sjr65iyd.onion
  • as7fbsjvifse52ek5qnptfgvkduvvnl56adb3jjgk6k3p7bisipvotyd.onion
  • qwjtw3lycrt2h4ftqmuv7srmlz32ln4nxj7n532gxrtemwndcvq36cyd.onion
  • xangddavm54rgsju7iceahxztbqrcflzunffwbaswwhhftieygc4j3ad.onion
  • cuuhrxbg52c5agytmtjpwfu7mrs4xtaitc4mukkiy2kqdxeqbcmuhaid.onion
  • zke5xim35cfolmq2h5i5sfmcoxr4pbpkfjwtq5lf6o4zo7avfcvnb5qd.onion

Brain Cipher questions

Is Brain Cipher still active?

Yes. Brain Cipher posted its most recent victim on July 10, 2026.

How many victims has Brain Cipher claimed?

Brain Cipher has named 71 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 30 of them were posted in the last 12 months.

When did Brain Cipher first appear?

The first victim we recorded for Brain Cipher was posted on July 4, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does Brain Cipher target?

Manufacturing accounts for the most victims we can classify, with 11. Financial Services follows at 7. We could identify a sector for 49 of 71 victims, so treat this as the shape of the targeting rather than a full census.

Has Brain Cipher already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.