blackbasta
First seen April 26, 2022Active525 claimed victims
The claims below are reproduced as posted by blackbasta on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| provencherroy.ca | April 1, 2024 | ransomware_live | — |
| cmactrans.com | March 31, 2024 | ransomware_live | — |
| patersoncooke.com | March 28, 2024 | ransomware_live | — |
| atlascontainer.com | March 28, 2024 | ransomware_live | — |
| Parklane Group | March 28, 2024 | ransomware_live | — |
| pstrans.com | March 27, 2024 | ransomware_live | — |
| siemensmfg.com | March 27, 2024 | ransomware_live | — |
| schlesingerlaw.com | March 26, 2024 | ransomware_live | — |
| processsolutions.com | March 26, 2024 | ransomware_live | — |
| azdel.com | March 26, 2024 | ransomware_live | — |
| oceaneering.com | March 20, 2024 | ransomware_live | — |
| sermo.com | March 20, 2024 | ransomware_live | — |
| pctinternational.com | March 19, 2024 | ransomware_live | — |
| kmbdg.com | March 19, 2024 | ransomware_live | — |
| mjcelco.com | March 19, 2024 | ransomware_live | — |
| activeconceptsllc.com | March 18, 2024 | ransomware_live | — |
| macphie.com | March 14, 2024 | ransomware_live | — |
| organizedliving.com | March 13, 2024 | ransomware_live | — |
| amerlux.com | March 13, 2024 | ransomware_live | — |
| ero-etikett.com | March 13, 2024 | ransomware_live | — |
| bulwarkpestcontrol.com | March 13, 2024 | ransomware_live | — |
| contechs.co.uk | March 12, 2024 | ransomware_live | — |
| duvel.com | boulevard.com | March 12, 2024 | ransomware_live | — |
| carolinafoodsinc.com | March 12, 2024 | ransomware_live | — |
| lagunitas.com | March 12, 2024 | ransomware_live | — |
| imperialtrading.com | March 7, 2024 | ransomware_live | — |
| prodrive.com | March 7, 2024 | ransomware_live | — |
| arch-con.com | March 7, 2024 | ransomware_live | — |
| theshootingwarehouse.com | March 6, 2024 | ransomware_live | — |
| flynncompanies.com | March 5, 2024 | ransomware_live | — |
| dgse.com | March 5, 2024 | ransomware_live | — |
| columbiapipe.com | March 4, 2024 | ransomware_live | — |
| otrwheel.com | March 2, 2024 | ransomware_live | — |
| numotion.com | March 2, 2024 | ransomware_live | — |
| linksunlimited.com | March 1, 2024 | ransomware_live | — |
| keystonetech.com | February 29, 2024 | ransomware_live | — |
| pdq-airspares.co.uk | February 29, 2024 | ransomware_live | — |
| dutyfreeamericas.com | February 28, 2024 | ransomware_live | — |
| northamericansigns.com | February 28, 2024 | ransomware_live | — |
| creativeenvironments.com | February 27, 2024 | ransomware_live | — |
| robar.com | February 27, 2024 | ransomware_live | — |
| logistasolutions.com | February 26, 2024 | ransomware_live | — |
| sierralobo.com | February 23, 2024 | ransomware_live | — |
| interluxury.com | February 23, 2024 | ransomware_live | — |
| hvd.host | February 22, 2024 | ransomware_live | — |
| xcelbrands.com | February 22, 2024 | ransomware_live | — |
| dasteam.ch | February 21, 2024 | ransomware_live | — |
| cpacsystems.se | February 21, 2024 | ransomware_live | — |
| fpdcompany.com | February 21, 2024 | ransomware_live | — |
| goodinabernathy.com | February 20, 2024 | ransomware_live | — |
| elmatic.de | February 20, 2024 | ransomware_live | — |
| scullionlaw.com | February 16, 2024 | ransomware_live | — |
| gfad.de | February 16, 2024 | ransomware_live | — |
| fcw.ch | February 15, 2024 | ransomware_live | — |
| haas4.com | February 14, 2024 | ransomware_live | — |
| vilis.com | February 14, 2024 | ransomware_live | — |
| ssmnlaw.com | February 13, 2024 | ransomware_live | — |
| pacifica.co.uk | February 13, 2024 | ransomware_live | — |
| usmerchants.com | February 13, 2024 | ransomware_live | — |
| climatech.com | February 9, 2024 | ransomware_live | — |
| nfllp.com | February 9, 2024 | ransomware_live | — |
| true.co.uk | February 9, 2024 | ransomware_live | — |
| dilweg.com | February 8, 2024 | ransomware_live | — |
| birchallfoodservice.co.uk | February 8, 2024 | ransomware_live | — |
| igf-inc.com | February 8, 2024 | ransomware_live | — |
| zircodata.com | February 7, 2024 | ransomware_live | — |
| asecos.com | February 6, 2024 | ransomware_live | — |
| btl.info | February 6, 2024 | ransomware_live | — |
| patriziapepe.com | February 6, 2024 | ransomware_live | — |
| barberemerson.com | February 6, 2024 | ransomware_live | — |
| alanritchey.com | February 6, 2024 | ransomware_live | — |
| willislease.com | February 2, 2024 | ransomware_live | — |
| globalrescue.com | February 2, 2024 | ransomware_live | — |
| ffppkg.co.uk | January 31, 2024 | ransomware_live | — |
| leonardssyrups.com | January 30, 2024 | ransomware_live | — |
| leclairgroup.com | January 25, 2024 | ransomware_live | — |
| stemcor.com | January 23, 2024 | ransomware_live | — |
| ktbslaw.com | January 23, 2024 | ransomware_live | — |
| southernwater.co.uk | January 22, 2024 | ransomware_live | — |
| whafh.com | December 22, 2023 | ransomware_live | — |
| prudentpublishing.com | December 22, 2023 | ransomware_live | — |
| sipicorp.com | December 22, 2023 | ransomware_live | — |
| unitedindustries.co.nz | December 21, 2023 | ransomware_live | — |
| cinfab.com | December 20, 2023 | ransomware_live | — |
| pecofoods.com | December 19, 2023 | ransomware_live | — |
| navitaspet.com | December 18, 2023 | ransomware_live | — |
| agc.com | December 17, 2023 | ransomware_live | — |
| team.jobs | December 15, 2023 | ransomware_live | — |
| haes.ca | December 13, 2023 | ransomware_live | — |
| kivibros.com | December 13, 2023 | ransomware_live | — |
| hotelplan.co.uk | December 12, 2023 | ransomware_live | — |
| dupont-restauration.fr | December 12, 2023 | ransomware_live | — |
| envea.global | December 11, 2023 | ransomware_live | — |
| alexander-dennis.com | December 7, 2023 | ransomware_live | — |
| brintons.co.uk | December 7, 2023 | ransomware_live | — |
| hallidays.co.uk | December 6, 2023 | ransomware_live | — |
| vyera.com | December 5, 2023 | ransomware_live | — |
| americanalarm.com | December 5, 2023 | ransomware_live | — |
| nals.com | December 5, 2023 | ransomware_live | — |
| leonardsexpress.com | December 5, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).