Skip to content
Ransomware

Orion Communications and Public Relations listed by Brotherhood ransomware group

The threat group known as Brotherhood has listed Orion Communications and Public Relations on its leak site, claiming to possess 13 GB of compressed data.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Brotherhood
  • Country: United States
  • Sector: Professional Services
  • Announcement date: October 10, 2025

Brotherhood ransomware group claims data breach at Orion Communications and Public Relations

The threat group known as Brotherhood has listed Orion Communications and Public Relations on its leak site. According to the announcement, the group claims to have obtained data belonging to the organization, marking a significant incident for the professional services firm. The claim was made public on October 10, 2025, and involves a substantial volume of information.

Details of the alleged attack

The Brotherhood group has published an announcement on its leak platform regarding the targeted organization. The group states that it has successfully obtained data belonging to Orion Communications and Public Relations. According to the claim, the group has released 13 GB of compressed files and databases as part of this incident. This announcement was officially published on October 10, 2025, coinciding with the date the group claims the attack occurred.

In modern cyberattack scenarios, ransomware groups often employ a tactic known as double extortion. In these instances, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The threat of leaking this stolen information on a public leak site serves as additional leverage to pressure the victim into paying a ransom. While the specific ransom demand for this incident was not disclosed in the announcement, the release of data is a hallmark of this extortion strategy.

Data involved in the leak

The announcement provides specific details regarding the volume of the information involved in the alleged breach. The group claims to have released the following:

  • 13 GB of compressed files and databases

The listing does not specify the exact number of files or the specific types of databases that were compromised. No information was provided regarding the specific contents of the files or the exact nature of the databases involved in the leak.

About Orion Communications and Public Relations

Orion Communications and Public Relations is a professional services firm. The organization provides a variety of services, including strategic communication, public relations, and media management services.

Potential impact and organizational risks

The alleged leak may pose significant risks to the organization's operational continuity and reputation. Depending on the actual contents of the databases, there may be a potential for the exposure of sensitive information belonging to clients or employees. Because the organization is based in the United States, potential data breaches could lead to legal consequences under state-level privacy laws and regulations.

Public information regarding the Brotherhood group remains limited. However, such leaks may create opportunities for secondary risks, such as identity theft or targeted phishing attacks. When sensitive data is released publicly, attackers often use the information to conduct more sophisticated social engineering campaigns against the organization's contacts or employees.

For organizations operating in the professional services sector, maintaining robust data security processes is essential to mitigate these types of threats. Common defensive steps for organizations facing such risks include implementing strict access controls, maintaining regular offline backups, and conducting thorough reviews of data security protocols. Additionally, organizations may need to notify affected parties if a breach is confirmed to ensure transparency and compliance with regulatory requirements.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories