Cephalus
Data as of August 16, 2026.
What industries Cephalus targets
Sector identified for 12 of 17 victims.
| Legal | 3 | |
| Financial Services | 2 | |
| Healthcare | 2 | |
| Manufacturing | 2 | |
| Hospitality | 1 | |
| Technology | 1 | |
| Non-profit | 1 |
Where the victims are located
Country identified for all 17 victims.
| United States | 12 | |
| United Kingdom | 2 | |
| Japan | 1 | |
| Netherlands | 1 | |
| Ireland | 1 |
Every Cephalus victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Delta Information Systems delta-info.com | Not identified | United States | Sep 1, 2025 |
| Acroamatics Telemetry Systems acroamatics.com | Manufacturing | United States | Aug 29, 2025 |
| One-LUX one-lux.com | Manufacturing | United Kingdom | Aug 29, 2025 |
| Shelbourne Accountants shelbourneaccountants.ie | Not identified | Ireland | Aug 29, 2025 |
| Shropdoc shropdoc.org.uk | Not identified | United Kingdom | Aug 29, 2025 |
| CoCo Yachts cocoyachts.com | Not identified | Netherlands | Aug 28, 2025 |
| Colorado Health Network Inc. coloradohealthnetwork.org | Healthcare | United States | Aug 28, 2025 |
| Wilder Law Firm wilderlawfirm.com | Legal | United States | Aug 28, 2025 |
| LPL Financial balancedsolutions4me.com | Financial Services | United States | Aug 27, 2025 |
| BAR Architects & Interiors bararch.com | Hospitality | United States | Aug 27, 2025 |
| CareSTL Health carestlhealth.org | Healthcare | United States | Aug 27, 2025 |
| Guerrero Mears gmllp.com | Legal | United States | Aug 27, 2025 |
| K Strategies kstrategies.com | Not identified | United States | Aug 27, 2025 |
| Lee & Associates Irvine, Inc. lee-irvine.com | Financial Services | United States | Aug 27, 2025 |
| Sherman, Silverstein, Kohl, Rose & Podolsky sskrplaw.com | Legal | United States | Aug 27, 2025 |
| SystemExec system-exe.co.jp | Technology | Japan | Aug 27, 2025 |
| Texas Pregnancy Care Network txpregnancy.org | Non-profit | United States | Aug 27, 2025 |
Browse recent data breaches for more.
Cephalus leak site
The address we've seen Cephalus publish victims from. Any .onion address needs the Tor Browser.
cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion
Cephalus questions
Is Cephalus still active?
It's gone quiet. The last victim we recorded was September 1, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.
How many victims has Cephalus claimed?
Cephalus has named 17 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Cephalus first appear?
The first victim we recorded for Cephalus was posted on August 27, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Cephalus target?
Legal accounts for the most victims we can classify, with 3. Financial Services follows at 2. We could identify a sector for 12 of 17 victims, so treat this as the shape of the targeting rather than a full census.
Has Cephalus already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.