blackbasta
First seen April 26, 2022Active525 claimed victims
The claims below are reproduced as posted by blackbasta on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Anton Paar | April 28, 2023 | ransomware_live | — |
| restorationmanagement | April 28, 2023 | ransomware_live | — |
| AUTOCAM MEDICAL | April 28, 2023 | ransomware_live | — |
| BLUME | April 28, 2023 | ransomware_live | — |
| TAMMAC | April 28, 2023 | ransomware_live | — |
| GTT | April 27, 2023 | ransomware_live | — |
| COACHCOMM | April 27, 2023 | ransomware_live | — |
| Gates Corporation | April 27, 2023 | ransomware_live | — |
| mastercorp | April 27, 2023 | ransomware_live | — |
| Yellow Pages | April 23, 2023 | ransomware_live | — |
| DOREL Industries | April 23, 2023 | ransomware_live | — |
| The Spooner Risk Control | April 23, 2023 | ransomware_live | — |
| David S. Brown Enterprises | April 23, 2023 | ransomware_live | — |
| RoadSafe Traffic Systems | April 11, 2023 | ransomware_live | — |
| HEICO | April 8, 2023 | ransomware_live | — |
| DCI-ENGINEERS | April 8, 2023 | ransomware_live | — |
| Raymond Storage Concepts | April 8, 2023 | ransomware_live | — |
| HUSKY | April 4, 2023 | ransomware_live | — |
| The Shively Bros | April 4, 2023 | ransomware_live | — |
| Precision Fabrics Group | April 4, 2023 | ransomware_live | — |
| Corporate Technologies | April 4, 2023 | ransomware_live | — |
| PCCARX_2 | March 29, 2023 | ransomware_live | — |
| DUKANE | March 29, 2023 | ransomware_live | — |
| VLS | March 24, 2023 | ransomware_live | — |
| rockinsurancebrokers | March 23, 2023 | ransomware_live | — |
| Dayton Superior | March 23, 2023 | ransomware_live | — |
| SUPPLYCORE | March 23, 2023 | ransomware_live | — |
| Advance America | March 23, 2023 | ransomware_live | — |
| Troutman Pepper | March 23, 2023 | ransomware_live | — |
| Mondial and Framec | March 23, 2023 | ransomware_live | — |
| Tri Counties Bank | March 19, 2023 | ransomware_live | — |
| Nor-Cal Beverage | March 19, 2023 | ransomware_live | — |
| Kittle’s | March 17, 2023 | ransomware_live | — |
| Rudman Winchell | March 17, 2023 | ransomware_live | — |
| ACEA Energia | March 17, 2023 | ransomware_live | — |
| Norman S. Wright Climatec | March 17, 2023 | ransomware_live | — |
| MARSHALLAMPS | March 17, 2023 | ransomware_live | — |
| VORNADO | March 17, 2023 | ransomware_live | — |
| Kanawha Scales | March 8, 2023 | ransomware_live | — |
| fflawoffice | March 8, 2023 | ransomware_live | — |
| MAKLERSOFTWARE | March 8, 2023 | ransomware_live | — |
| Hall Booth Smith | March 8, 2023 | ransomware_live | — |
| XLTRAILERS | March 8, 2023 | ransomware_live | — |
| KWS | March 8, 2023 | ransomware_live | — |
| Macomb Group | March 8, 2023 | ransomware_live | — |
| clair | March 8, 2023 | ransomware_live | — |
| NOVATI | March 8, 2023 | ransomware_live | — |
| Newly Weds Foods | March 8, 2023 | ransomware_live | — |
| Mettis Aerospace | March 8, 2023 | ransomware_live | — |
| The Norfolk Capital Group | March 8, 2023 | ransomware_live | — |
| Echelon Fitness | March 8, 2023 | ransomware_live | — |
| Bayou Title | March 8, 2023 | ransomware_live | — |
| PFC Brakes | March 8, 2023 | ransomware_live | — |
| ATCDT | March 8, 2023 | ransomware_live | — |
| Michael & Son | March 8, 2023 | ransomware_live | — |
| Sandals Resorts International | March 8, 2023 | ransomware_live | — |
| Potandon Foundation | March 8, 2023 | ransomware_live | — |
| Sound Publishing | March 8, 2023 | ransomware_live | — |
| Ennis, Inc. | March 8, 2023 | ransomware_live | — |
| WOODHAVEN | March 8, 2023 | ransomware_live | — |
| CEC ELECTRICAL | March 8, 2023 | ransomware_live | — |
| UPONOR | March 8, 2023 | ransomware_live | — |
| SMLAW | March 8, 2023 | ransomware_live | — |
| ARRI | March 8, 2023 | ransomware_live | — |
| Mortons Media Group Ltd | March 8, 2023 | ransomware_live | — |
| Altro | March 8, 2023 | ransomware_live | — |
| LLF Lawyers | March 8, 2023 | ransomware_live | — |
| Motivating Graphics | March 8, 2023 | ransomware_live | — |
| CORPADS_2 | March 8, 2023 | ransomware_live | — |
| Sterling | December 19, 2022 | ransomware_live | — |
| The Exchange Bank | December 19, 2022 | ransomware_live | — |
| Jeppesen | December 19, 2022 | ransomware_live | — |
| Petmate | December 14, 2022 | ransomware_live | — |
| Pella | December 13, 2022 | ransomware_live | — |
| nworksllc | December 9, 2022 | ransomware_live | — |
| SEACAST | December 9, 2022 | ransomware_live | — |
| Panolam Surface Systems | December 9, 2022 | ransomware_live | — |
| AIRCOMECHANICAL | December 9, 2022 | ransomware_live | — |
| Cleveland Brothers | December 9, 2022 | ransomware_live | — |
| A.R. Thomson Group | December 9, 2022 | ransomware_live | — |
| Dingbro Ltd | December 9, 2022 | ransomware_live | — |
| Atcore | December 9, 2022 | ransomware_live | — |
| Maney | Gordon | Zeller, P.A. | December 9, 2022 | ransomware_live | — |
| PANOLAM | December 6, 2022 | ransomware_live | — |
| Maple Leaf Foods | December 1, 2022 | ransomware_live | — |
| ITM | November 25, 2022 | ransomware_live | — |
| Kessing Rechtsanwälte und Fachanwälte in PartGmbB | November 17, 2022 | ransomware_live | — |
| IMA Financial Group, Inc. | November 16, 2022 | ransomware_live | — |
| Popp Hutcheson PLLC | November 13, 2022 | ransomware_live | — |
| Wilken Software Group | November 7, 2022 | ransomware_live | — |
| METRO | November 7, 2022 | ransomware_live | — |
| MITCON Consultancy & Engineering Services Limited | November 5, 2022 | ransomware_live | — |
| Bitron | November 3, 2022 | ransomware_live | — |
| CADEPLOY | October 31, 2022 | ransomware_live | — |
| STECINT_2 | October 31, 2022 | ransomware_live | — |
| Genesys Aerosystems | October 31, 2022 | ransomware_live | — |
| Essick Air Products | October 26, 2022 | ransomware_live | — |
| Associated Lighting Representatives | October 26, 2022 | ransomware_live | — |
| STONE1 | October 23, 2022 | ransomware_live | — |
| ALRO | October 23, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).