A ransomware group calling itself BrainCipher claims to have carried out an attack against AEI Consultants (aeiconsultants.com), with the claim dated August 31, 2026. This claim was identified on the group’s own dark-web leak-site listing, which is tracked by ransomware.live, a security research platform that monitors ransomware groups’ public extortion sites. At this time, the claim is unverified — AEI Consultants has not issued a public confirmation, and no regulator has confirmed any incident.
What we know — and don’t
- BrainCipher listed AEI Consultants on its leak site with a claimed date of August 31, 2026.
- AEI Consultants operates in a general consulting capacity, categorized here under the ‘other’ sector.
- The specific types of data BrainCipher claims to have obtained — such as personal, financial, or operational records — have not been disclosed publicly or confirmed by any party.
- No independent verification of this claim currently exists beyond the group’s own leak-site posting.
- It is not yet known whether AEI Consultants has acknowledged, investigated, or responded to this claim.
What should you do if you have an account with this company?
- Change your password for any account associated with AEI Consultants, and avoid reusing that password elsewhere.
- Enable two-factor authentication (2FA) wherever it is offered, particularly on email and financial accounts.
- Be cautious of unexpected emails, calls, or texts referencing AEI Consultants, especially those urging quick action or requesting personal details — these could be phishing attempts.
- Monitor your financial statements and credit reports for unfamiliar activity in the coming weeks and months.
- Consider using an identity monitoring service such as a service like Aura or LifeLock to help detect if your personal information appears in places it shouldn’t.
- Keep any communications from AEI Consultants regarding this matter, and note dates and details in case they become relevant later.
BreachLetter will update this page if AEI Consultants confirms this incident, issues a public statement, or if the matter is officially reported to regulators.