I'd guess Digital Alpha (DEC) but I can't find anything mentioning it. Other guess would be Cray.
- The free software used to implement RISC-V architecture is defined for 32, 64 and 128 bits [...]
- Universally unique identifiers (UUID) consist of a 128-bit value.
- IPv6 routes computer network traffic amongst a 128-bit range of addresses.
- ZFS is a 128-bit file system.
- 128 bits is a common key size for symmetric ciphers [...]
- The IBM i virtual instruction set defines all pointers as 128-bit.
- Increasing the word size can speed up multiple precision mathematical libraries [...]
- MD5 is a hash function producing a 128-bit hash value.
- Apache Avro uses a 128-bit random number as synchronization marker [...]In particular, MD5 use in new software is strongly discouraged.
You'll note that some of them are essentially identical with https://en.wikipedia.org/wiki/256-bit_computing so they seem more guided by abstract arguments than concrete engineering reasoning.