THREAT WATCH · September 29, 2026 · RANSOMWARE LISTING

Mulholland.com Listed by BRAINCIPHER Ransomware Group

On September 29, 2026, the domain mulholland.com was recorded on a ransomware tracker operated by the BRAINCIPHER group. The listing places a US-based hospitality and food-and-beverage company in the 51 to 100 employee range on the group's public disclosure page. As of the time of this report, the organization has not disclosed a breach. A listing on an attacker-side tracker is strong signal but does not confirm data theft or system compromise on its own.

Key takeaways

• mulholland.com was recorded on the BRAINCIPHER ransomware tracker on September 29, 2026.
• The organization operates in the US hospitality and food-and-beverage sector with 51 to 100 employees.
• No public disclosure has been made by the organization as of this report.
• A tracker listing is strong signal of attempted extortion but does not confirm a breach.

What the listing shows

• The domain mulholland.com appears on the BRAINCIPHER ransomware tracker.
• The listing date is September 29, 2026.
• The organization is based in the United States.
• The sector is classified as Hospitality / Food & Beverage / Tourism.
• The company size falls in the 51 to 100 employee range.
• No public disclosure has been made by the organization as of this report.

About BRAINCIPHER

BRAINCIPHER is a ransomware group that operates a public leak site where it posts domains and organization names it claims to have compromised. The group has been active in recording listings across multiple sectors. A listing on the site indicates the group is attempting to pressure the target into paying a ransom by threatening public exposure of stolen data. The group's operational details, including ransom demands and encryption methods, are not publicly documented in this report.

What this means for the organization

• A tracker listing is a strong indicator of attempted extortion but is not proof of a confirmed breach.
• The organization has not issued a public statement or disclosure as of September 29, 2026.
• Companies in the hospitality and food-and-beverage sector handle customer data, payment information, and operational records that are attractive targets for ransomware groups.
• The absence of a public disclosure does not confirm or deny a breach. It may indicate the organization is still investigating, negotiating, or has chosen not to comment.

Recommended actions for security teams

• Monitor the BRAINCIPHER tracker for any data dumps or sample files attributed to mulholland.com.
• Review internal logs for unusual access patterns, lateral movement, or encryption events in the weeks preceding September 29, 2026.
• Confirm that offline backups are intact and restorable.
• Engage legal counsel before making any public statement to avoid premature admissions or regulatory missteps.
• Notify relevant stakeholders, including partners and customers, only after internal validation is complete.

Context for the sector

The hospitality and food-and-beverage industry has seen a steady rise in ransomware activity. Small and mid-sized firms in this sector often lack dedicated security teams, making them attractive targets. The 51 to 100 employee range places this organization in a category where IT resources may be stretched thin, increasing the likelihood that an intrusion could go undetected for some time before a ransom demand arrives. Intel128 will update this entry if the organization issues a disclosure or if additional data appears on the tracker.

SOURCE: INTEL128 THREAT INTELLIGENCE FEED (UPDATED OCT 01, 2026). A listing is a record on an attacker-side ransomware tracker - strong signal, not a confirmed breach. Intel128 publishes what the feed shows and no more.