Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Cipherforce
As of Oct 19, 2026, Cipherforce has listed 11 confirmed victims on its leak site since Feb 23, 2026, 0.0% of all victims tracked by Brandefense. Its most targeted country is United States (27.3% of its victims) and its most targeted sector is Technology.
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 11
- Rank By Victims
- #220
- Last Leak-Site Post
- Mar 26, 2026
- Top Country
- United States
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| February 2026 | 6 |
| March 2026 | 5 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| February 2026 | 6 |
| March 2026 | 5 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Cipherforce Victims.
Search all 11 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Sportradar.io sportradar.io | CHSwitzerland | Technology | Not stated | |
| Tuna.uy tuna.uy | BRBrazil | Unknown | Not stated | |
| Liberty Tax libertytax.com | USUnited States | Consulting | Not stated | |
| TCT Broadband Solutions tctbroadband.com | Unknown | Telecommunications | Not stated | |
| Telcom Live Content Inc telcomlivecontent.com | PHPhilippines | Unknown | Not stated | |
| Accuick accuick.com | USUnited States | Unknown | 177000 KB |
How They Operate.
Cipherforce's threat actor profile lists 157 ATT&CK techniques, 7 exploited CVEs, 77 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Cipherforce Targets.
History.
Busiest month on record: 6 confirmed victims
First seen in Brandefense data
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.