Ransomware group

Brotherhood ransomware: victims and leak site activity

The Brotherhood ransomware group has listed 18 victims on its leak site since October 2025; its latest post is from 6 January 2026. Most affected countries: United States, Australia and Canada. Most targeted sector: Professional Services.

Total posts 18
First seen 2025-10-10
Latest post 2026-01-06
Countries hit 8

About Brotherhood

Brotherhood is a ransomware group that emerged in late 2025, targeting organizations in the US, Canada, and Australia across manufacturing, communications, and construction sectors, operating a Tor-based double-extortion leak site.

Leak site (Tor)
http://brohoodyaifh2ptccph5zfljyajjabwjjo4lg6gfp4xb6ynw5w7ml6id.onion

Brotherhood victims per year

17 2025
1 2026

All 18 victims

Search every post in the full table.
Victim Country Sector Discovered
Italgrafica Sistemi Italy Manufacturing
häussermann stauden gehölze gmbh Germany Agriculture and Food Production
Ingenieurbüro Laudi Germany Professional Services
Horst Realty United States Professional Services
Spoleta Construction United States Manufacturing
Cera Stribley Australia
Kaener Personal Switzerland Professional Services
Ninas Jewellery Australia Retail & E-Commerce
Integlia Canada Professional Services
Citizens' Committee for Children of New York United States Government & Defense
Momentum Logistics South Africa Transportation
Sternthal Montigny Greenberg St-Germain Canada Professional Services
Kevmor Australia Professional Services
Woodmen Valley Chapel United States Government & Defense
UVJ Technologies United States Technology
Motility Software United States Technology
Orion Communications and Public Relations United States Professional Services
Coal Industry Social Welfare Organisation United Kingdom Energy & Utilities