On June 22, 2026, the Canadian tax-preparation firm eggetttax.ca appeared on the leak site of the ransomware group BrainCipher. Internal files were allegedly exfiltrated during a ransomware attack, and the company’s data is now publicly listed for anyone who visits the group’s onion address.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch eggetttax.ca
Get alerted the next time eggetttax.ca files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about eggetttax.ca’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that BrainCipher added eggetttax.ca to its leak site on June 22, 2026. The listing states that internal files were stolen in a ransomware incident. No confirmed victim count has been released, and the precise volume or sensitivity of the documents remains unclear from available reporting. The data was taken from the company’s internal systems before any ransom demand was met.
Why This Matters for You and Your Family
If you have used eggetttax.ca to file taxes, prepare returns, or submit any personal financial information, your records may now sit in an attacker-controlled archive. Tax documents typically contain your full name, address, date of birth, Social Insurance Number, income details, banking information, and sometimes spouse or dependent data. Once that combination leaves a legitimate company and reaches a ransomware leak site, it becomes raw material for identity theft, fraudulent loan applications, and targeted scams against you and your family. Even if you were not the primary client, any shared household financial records can expose everyone listed on the same return.
The Doxxing and Identity-Chain Implications
Tax records are high-value connectors in doxxing chains. A single file can link your legal identity to email addresses, phone numbers, employer details, and family member names. Attackers routinely combine this information with credential leaks from other breaches to map out your entire digital footprint. The same data that helps you file taxes can later help someone hijack your accounts, impersonate you to government agencies, or publish your personal details online. Credential leaks like this one cascade into account takeovers and doxxing chains, which is why protecting gaming accounts—yours or your children’s—matters. A compromised child’s gaming username tied to a family email can quickly lead back to the same household address now sitting in the eggetttax.ca files.