8base
First seen May 23, 2023Active455 claimed victims
The claims below are reproduced as posted by 8base on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The 8base Ransomware group made its first appearance in early March 2022, remaining somewhat quiet after the attacks. This group operates like other ransomware actors, engaging in double extortion. However, in mid-May and June 2023, the ransomware operation saw a spike in activity against organizations from various sectors, listing 131 organizations in just 3 months. The 8base data leak site was created and made available in March 2023, claiming honesty and simplicity in its discourse.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| DUNN, PITTMAN, SKINNER and CUSHMAN, PLLC | April 8, 2024 | ransomware_live | — |
| Mahoney Foundry, Inc. | April 8, 2024 | ransomware_live | — |
| Calumet Civil Contractors, Inc. | April 8, 2024 | ransomware_live | — |
| Pim | April 3, 2024 | ransomware_live | — |
| Apex Business Advisory | April 3, 2024 | ransomware_live | — |
| Tamura Corporation | April 3, 2024 | ransomware_live | — |
| Samhwa Paint Ind. Ltd | April 3, 2024 | ransomware_live | — |
| Ringhoffer Verzahnungstechnik GmbH and Co. KG | April 3, 2024 | ransomware_live | — |
| isophon glas GmbH | March 27, 2024 | ransomware_live | — |
| Lindos Group Of Companies | March 27, 2024 | ransomware_live | — |
| UNDP | March 27, 2024 | ransomware_live | — |
| HC Querétaro | March 27, 2024 | ransomware_live | — |
| Filexis AG Treuhand und Immobilien | March 20, 2024 | ransomware_live | — |
| ÖSTENSSONS LIVS AB | March 20, 2024 | ransomware_live | — |
| Springfield Sign | March 20, 2024 | ransomware_live | — |
| Forstinger Österreich GmbH | March 13, 2024 | ransomware_live | — |
| Brewer Davidson | March 13, 2024 | ransomware_live | — |
| Mediplast AB | March 6, 2024 | ransomware_live | — |
| Global Zone | March 6, 2024 | ransomware_live | — |
| Kudulis Reisinger Price | March 6, 2024 | ransomware_live | — |
| Sprimoglass | March 6, 2024 | ransomware_live | — |
| RWF Frömelt | February 28, 2024 | ransomware_live | — |
| ROYAL INSIGNIA | February 28, 2024 | ransomware_live | — |
| Acies Srl | February 28, 2024 | ransomware_live | — |
| Bertani Trasporti Spa | February 28, 2024 | ransomware_live | — |
| Saudia MRO | February 28, 2024 | ransomware_live | — |
| CHRG | February 28, 2024 | ransomware_live | — |
| Axel Johnson | February 21, 2024 | ransomware_live | — |
| Helical Technology | February 21, 2024 | ransomware_live | — |
| Essential Labs | February 21, 2024 | ransomware_live | — |
| Enplast | February 21, 2024 | ransomware_live | — |
| ATB SA Ingénieurs-conseils SIA | February 14, 2024 | ransomware_live | — |
| Institutional Casework, Inc | February 14, 2024 | ransomware_live | — |
| UNIFER | February 14, 2024 | ransomware_live | — |
| C and J Industries, Inc. | February 14, 2024 | ransomware_live | — |
| RSHP | February 14, 2024 | ransomware_live | — |
| YRW Limited - Chartered Accountants | February 7, 2024 | ransomware_live | — |
| Karl Rieker GmbH and Co. KG | February 7, 2024 | ransomware_live | — |
| Therme Laa Hotel and Silent Spa | February 7, 2024 | ransomware_live | — |
| Tetrosyl Group Limited | February 7, 2024 | ransomware_live | — |
| Anderco PTE LTD | February 7, 2024 | ransomware_live | — |
| Federchimica | February 7, 2024 | ransomware_live | — |
| Geographe | January 31, 2024 | ransomware_live | — |
| Séquano | January 31, 2024 | ransomware_live | — |
| Meag Va-system AB | January 31, 2024 | ransomware_live | — |
| Nbbl | January 31, 2024 | ransomware_live | — |
| Basin Trucking and Oilfield Services LLC | January 31, 2024 | ransomware_live | — |
| VVD Elettrotecnica Srl | January 31, 2024 | ransomware_live | — |
| Elliott Wave International | January 31, 2024 | ransomware_live | — |
| Harinck | January 31, 2024 | ransomware_live | — |
| Glimstedt | January 24, 2024 | ransomware_live | — |
| Sunfab Hydraulics AB | January 24, 2024 | ransomware_live | — |
| Midwest Service Center | January 24, 2024 | ransomware_live | — |
| La Ligue | January 24, 2024 | ransomware_live | — |
| Bikesportz Imports | January 24, 2024 | ransomware_live | — |
| Groupe Sweetco | January 24, 2024 | ransomware_live | — |
| CERALP | January 24, 2024 | ransomware_live | — |
| Worthen Industries | January 24, 2024 | ransomware_live | — |
| Nexus Telecom Switzerland AG | January 16, 2024 | ransomware_live | — |
| SIVAM Coatings S.p.A. | January 16, 2024 | ransomware_live | — |
| Washtech | January 16, 2024 | ransomware_live | — |
| Syndicat Général des Vignerons de la Champagne | January 16, 2024 | ransomware_live | — |
| Axfast AB | January 16, 2024 | ransomware_live | — |
| ARPEGE | January 16, 2024 | ransomware_live | — |
| Able One a Quadbridge Company | January 16, 2024 | ransomware_live | — |
| Sems and Specials Incorporated | January 12, 2024 | ransomware_live | — |
| Anderson King Energy Consultants, LLC | January 12, 2024 | ransomware_live | — |
| BALLAY MENUISERIES | January 12, 2024 | ransomware_live | — |
| International Trade Brokers and Forwarders | January 12, 2024 | ransomware_live | — |
| Former S.p.A. | January 12, 2024 | ransomware_live | — |
| Precision Tune Auto Care | January 9, 2024 | ransomware_live | — |
| Malongo France | January 9, 2024 | ransomware_live | — |
| C and F Packing Company Inc. | January 9, 2024 | ransomware_live | — |
| Diamond Technical Services, Inc. | January 9, 2024 | ransomware_live | — |
| PJ Green Inc | January 9, 2024 | ransomware_live | — |
| PWS - The Laundry Company | January 9, 2024 | ransomware_live | — |
| LILI'S BROWNIES | January 9, 2024 | ransomware_live | — |
| Davis Cedillo & Mendoza Inc | December 20, 2023 | ransomware_live | — |
| socadis | December 20, 2023 | ransomware_live | — |
| Horizon Pool & Spa | December 20, 2023 | ransomware_live | — |
| Employ Milwaukee | December 20, 2023 | ransomware_live | — |
| The International School of Management | December 20, 2023 | ransomware_live | — |
| CETEC Ingénierie | December 20, 2023 | ransomware_live | — |
| LCGB | December 20, 2023 | ransomware_live | — |
| Davis Cedillo and Mendoza Inc | December 20, 2023 | ransomware_live | — |
| Horizon Pool and Spa | December 20, 2023 | ransomware_live | — |
| Insidesource | December 16, 2023 | ransomware_live | — |
| Tim Davies Landscaping | December 13, 2023 | ransomware_live | — |
| REUS MOBILITAT I SERVEIS | December 13, 2023 | ransomware_live | — |
| Soethoudt metaalbewerking b.v. | December 13, 2023 | ransomware_live | — |
| Groupe PROMOBE | December 13, 2023 | ransomware_live | — |
| William Jackson Food Group | December 13, 2023 | ransomware_live | — |
| Hawkins Sales | December 13, 2023 | ransomware_live | — |
| VAC-U-MAX | December 13, 2023 | ransomware_live | — |
| CACG | December 13, 2023 | ransomware_live | — |
| SBK Real Estate | December 13, 2023 | ransomware_live | — |
| Visan | December 7, 2023 | ransomware_live | — |
| astley. | December 6, 2023 | ransomware_live | — |
| Calgary TELUS Convention Centre | December 6, 2023 | ransomware_live | — |
| SMG Confrere | December 6, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).