blackbasta
First seen April 26, 2022Active525 claimed victims
The claims below are reproduced as posted by blackbasta on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| graebener-group.com | December 5, 2023 | ransomware_live | — |
| kohlwholesale.com | December 4, 2023 | ransomware_live | — |
| webblaw.com | December 4, 2023 | ransomware_live | — |
| nlt.com | December 2, 2023 | ransomware_live | — |
| thirdstreetbrewhouse.com carolinabeveragegroup.com | November 29, 2023 | ransomware_live | — |
| jacobsfarmdelcabo.com | November 22, 2023 | ransomware_live | — |
| edc.dk | November 17, 2023 | ransomware_live | — |
| andersonandjones.com | November 17, 2023 | ransomware_live | — |
| rekord.de | November 14, 2023 | ransomware_live | — |
| etude-villa.fr | November 8, 2023 | ransomware_live | — |
| inseinc.com | November 8, 2023 | ransomware_live | — |
| acawtrustfunds.ca | November 7, 2023 | ransomware_live | — |
| tt-engineering.nl | November 7, 2023 | ransomware_live | — |
| boulangerieauger.com | November 7, 2023 | ransomware_live | — |
| arenaproducts.com | November 7, 2023 | ransomware_live | — |
| agrovi.dk | November 7, 2023 | ransomware_live | — |
| agy.com | November 3, 2023 | ransomware_live | — |
| imancorp.es | November 2, 2023 | ransomware_live | — |
| stantonwilliams.com | November 1, 2023 | ransomware_live | — |
| bionpharma.com | November 1, 2023 | ransomware_live | — |
| edwardian.com | November 1, 2023 | ransomware_live | — |
| gsp.com.br | November 1, 2023 | ransomware_live | — |
| gannons.co.uk | November 1, 2023 | ransomware_live | — |
| fortive.com | November 1, 2023 | ransomware_live | — |
| piemmeonline.it | November 1, 2023 | ransomware_live | — |
| baccarat.com | November 1, 2023 | ransomware_live | — |
| uchlogistics.co.uk | November 1, 2023 | ransomware_live | — |
| browardfactory.com | October 31, 2023 | ransomware_live | — |
| ayakitchens.com | October 31, 2023 | ransomware_live | — |
| cmcsheetmetal.com | October 31, 2023 | ransomware_live | — |
| citycontainer.dk | October 31, 2023 | ransomware_live | — |
| torrescpa.com | October 30, 2023 | ransomware_live | — |
| maytec.de | October 30, 2023 | ransomware_live | — |
| agromatic.de | October 30, 2023 | ransomware_live | — |
| jlgmarine.com | October 28, 2023 | ransomware_live | — |
| VOLEX.COM | October 27, 2023 | ransomware_live | — |
| cozwolle.nl | October 27, 2023 | ransomware_live | — |
| triflex.nl | October 27, 2023 | ransomware_live | — |
| nicecloud.nl | October 27, 2023 | ransomware_live | — |
| secci.ca | October 26, 2023 | ransomware_live | — |
| boslogistics.eu | October 25, 2023 | ransomware_live | — |
| h-tube.com | October 24, 2023 | ransomware_live | — |
| shopbentley.com | October 24, 2023 | ransomware_live | — |
| Panificio Grandolfo | October 23, 2023 | ransomware_live | — |
| Panetteria Grandolfo | October 21, 2023 | ransomware_live | — |
| sacksteinlaw.com | October 19, 2023 | ransomware_live | — |
| califanocarrelli.it | October 18, 2023 | ransomware_live | — |
| fairmontfcu.com | October 18, 2023 | ransomware_live | — |
| BACCARAT | October 17, 2023 | ransomware_live | — |
| Ampersand | October 17, 2023 | ransomware_live | — |
| HAFFNER GmbH Co. | October 17, 2023 | ransomware_live | — |
| Edwardian Hotels London | October 17, 2023 | ransomware_live | — |
| STANTON WILLIAMS | October 17, 2023 | ransomware_live | — |
| DOMAIN-BACCARAT_2 | October 16, 2023 | ransomware_live | — |
| fortive.com | October 12, 2023 | ransomware_live | — |
| Fortive Corporation | October 12, 2023 | ransomware_live | — |
| GREGAGG | October 11, 2023 | ransomware_live | — |
| REH | October 11, 2023 | ransomware_live | — |
| STANTONWILLIAMS | October 11, 2023 | ransomware_live | — |
| Simpson Strong-Tie | October 10, 2023 | ransomware_live | — |
| strongtie.com | October 10, 2023 | ransomware_live | — |
| piemmeonline.it | October 3, 2023 | ransomware_live | — |
| PIEMME S.p.A. | October 3, 2023 | ransomware_live | — |
| NCC_2 | September 28, 2023 | ransomware_live | — |
| Intred | September 28, 2023 | ransomware_live | — |
| intred.it | September 28, 2023 | ransomware_live | — |
| ampersand.tv | September 28, 2023 | ransomware_live | — |
| HAEFFNER-ASP | September 26, 2023 | ransomware_live | — |
| hugohaeffner.com | September 26, 2023 | ransomware_live | — |
| GROUPHC | August 22, 2023 | ransomware_live | — |
| TWINTOWER | August 17, 2023 | ransomware_live | — |
| SYNQUESTLABS | August 17, 2023 | ransomware_live | — |
| VDVEN | August 17, 2023 | ransomware_live | — |
| DEUTSCHELEASING | August 17, 2023 | ransomware_live | — |
| ALLIANCE | August 17, 2023 | ransomware_live | — |
| All States Ag Parts | July 30, 2023 | ransomware_live | — |
| EDVMS | July 25, 2023 | ransomware_live | — |
| BION_2 | July 24, 2023 | ransomware_live | — |
| Bartlett | July 22, 2023 | ransomware_live | — |
| Blount | July 1, 2023 | ransomware_live | — |
| Blount Fine Foods | July 1, 2023 | ransomware_live | — |
| GIAMBELLI | June 28, 2023 | ransomware_live | — |
| MODERNIND_2 | June 28, 2023 | ransomware_live | — |
| GraphTec | June 28, 2023 | ransomware_live | — |
| M&M Industries | June 23, 2023 | ransomware_live | — |
| MORSEMOVING | June 20, 2023 | ransomware_live | — |
| Marchant Schmidt | June 14, 2023 | ransomware_live | — |
| Regal West Corporation | June 12, 2023 | ransomware_live | — |
| Hill AeroSystems Inc. | June 12, 2023 | ransomware_live | — |
| TAGAVIA | June 10, 2023 | ransomware_live | — |
| BOBST | June 5, 2023 | ransomware_live | — |
| Sur La Table | May 31, 2023 | ransomware_live | — |
| McCarthy Fingar | May 30, 2023 | ransomware_live | — |
| Rheinmetall AG | May 20, 2023 | ransomware_live | — |
| AVIAREPS | May 17, 2023 | ransomware_live | — |
| FR | May 4, 2023 | ransomware_live | — |
| MEADE TRACTOR | May 3, 2023 | ransomware_live | — |
| Lincoln Wood Products | May 3, 2023 | ransomware_live | — |
| Carrington | May 3, 2023 | ransomware_live | — |
| Colvillbanks | April 30, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).