Alu-rex.com listed on BrainCipher leak site

• Ransomware group: BrainCipher
• Country: Austria
• Sector: Manufacturing
• Announcement date: June 15, 2026

The threat actor known as BrainCipher has officially listed the Austrian organization alu-rex.com on its dedicated leak site. According to the announcement, the group claims to have successfully exfiltrated a significant volume of data from the company's internal systems. This development follows a pattern of activity observed with this specific threat actor, which typically employs double-extortion tactics during its campaigns.

The details of the claim

The announcement, which was published on June 15, 2026, alleges that the BrainCipher group has obtained a substantial amount of information from the target. The group asserts that they have successfully accessed and stolen files and documents belonging to alu-rex.com. While the listing was made public on June 15, 2026, the group has also indicated that the attack itself occurred on the same date.

As is common with many ransomware-related leak site announcements, the group has provided a deadline for the organization. This deadline serves as a timeframe for the organization to respond to the attackers or to meet the specific demands set forth by the group. At this stage, no specific ransom demand has been publicly disclosed by the threat actor.

Data involved in the alleged breach

Regarding the specific nature of the information stolen, the group has provided limited details. While the scale of the exfiltration is significant, the content itself remains largely unspecified. The listing provides the following information regarding the volume of data:

• A total of 150 GB of files and documents.

The group has not provided any specific details regarding the content or the exact types of files contained within this 150 GB of data. No specific file counts or individual file types have been identified in the public announcement.

Organization profile

Alu-rex.com is an Austrian company that operates within the manufacturing sector. The organization specializes in the aluminum and metal processing industry, focusing specifically on the production of industrial components and various structural solutions.

Risk assessment and industry implications

The claims made by BrainCipher pose a potential risk to the operational continuity and the data privacy of alu-rex.com. Because the organization is based in Austria, the confirmation of such a breach could trigger significant legal consequences. Specifically, the company may face legal sanctions and mandatory notification obligations under the General Data Protection Regulation (GDPR).

The potential publication of this data carries several risks, including the exposure of sensitive trade secrets. Such a leak can create opportunities for secondary attacks, where threat actors use the stolen information to conduct further social engineering or targeted campaigns against the organization or its partners.

BrainCipher is a threat group that emerged in 2024. The group has gained notoriety for its involvement in high-profile attacks, including a notable incident involving a national data center in Indonesia. Their use of double-extortion—where data is both encrypted and stolen to increase leverage—is a hallmark of their operations.

For organizations operating in the manufacturing and industrial sectors, these types of incidents highlight the necessity of robust security postures. To mitigate the risks associated with such threats, it is suggested that organizations treat these claims with high priority and initiate comprehensive security audits to verify the integrity of their systems and identify any potential unauthorized access.