BrainCipher ransomware group lists mulholland.com on its leak site

• Ransomware group: BrainCipher
• Country: United States
• Announcement date: September 29, 2026

BrainCipher claims data breach at Mulholland

The threat actor known as BrainCipher has announced the alleged leak of a significant dataset belonging to mulholland.com. According to a post on the group's leak site, the breach involves a massive volume of stolen information, marking a potential high-impact security incident for the targeted organization.

Ransomware groups often employ a tactic known as double extortion, where they not only encrypt an organization's local systems but also exfiltrate sensitive data. The threat actor then threatens to publish this data on a public leak site if the ransom demands are not met. This pressure tactic is designed to maximize leverage by threatening the victim's reputation and legal standing.

Details of the alleged attack

The BrainCipher group claims to have compromised a total of 110,900 files belonging to mulholland.com. The group has listed a dataset totaling 100 GB on their leak site. According to the announcement, the incident occurred on September 29, 2026. While the group has published the data, no specific information was provided regarding a ransom demand or the status of any communication process regarding these files, though the threat actor may have initiated such processes involving the operational and personal data contained within the leak.

Sensitive information allegedly exposed

The data allegedly leaked by the threat actor is highly sensitive, spanning various categories of personal, medical, and operational information. The listing includes the following types of data:

• Driver drug test records
• Medical data
• Injury records
• Customer agreements (MSAs/NDAs)
• W-9 forms
• Credit applications
• ACH banking details
• Billing rates
• GPS telemetry data
• Operational permit documents

The exposure of such diverse datasets, particularly those containing financial and medical information, presents significant risks to the individuals whose data is contained in the files.

About Mulholland

Mulholland is a Los Angeles-based organization that provides luxury real estate development and property management services.

Risk assessment and organizational implications

The claims made by the BrainCipher group may pose a high risk to the organization's employees and customers. The exposure of sensitive banking information and medical records could lead to identity theft and fraudulent activities for the affected individuals. Given that the organization is based in the US, this incident may result in legal consequences under state-level data protection laws and federal regulations.

Furthermore, the leaked contracts and operational data might contain trade secrets that could be exploited for supply chain attacks or by competitors. Public information about the Brain Cipher group is limited; however, considering their history of targeting national infrastructure, the severity of this incident may be considered high.

In the wake of such incidents, organizations typically focus on incident response and forensic investigations to determine the scope of the breach. Common defensive steps for organizations include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent initial access by threat actors. For organizations in the real estate and property management sector, protecting client financial data and operational permits is critical to maintaining trust and regulatory compliance.