blackbasta
First seen April 26, 2022Active525 claimed victims
The claims below are reproduced as posted by blackbasta on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| J.M. Rodgers Co. | October 23, 2022 | ransomware_live | — |
| EDC3 | October 23, 2022 | ransomware_live | — |
| BOOTZ | October 23, 2022 | ransomware_live | — |
| Diamond Mowers | October 23, 2022 | ransomware_live | — |
| A G Equipment Company | October 23, 2022 | ransomware_live | — |
| CSW GmbH | October 18, 2022 | ransomware_live | — |
| Quality Telecom Consultants Inc | October 12, 2022 | ransomware_live | — |
| SMART Mechanical Solutions | October 12, 2022 | ransomware_live | — |
| MERCOLA | October 12, 2022 | ransomware_live | — |
| Michael Sullivan & Associates | October 12, 2022 | ransomware_live | — |
| AMPORTS | October 12, 2022 | ransomware_live | — |
| ALFATECH | October 12, 2022 | ransomware_live | — |
| Shiloh Industries | October 11, 2022 | ransomware_live | — |
| Willemen Group | October 6, 2022 | ransomware_live | — |
| The UNITED GRINDING Group | October 6, 2022 | ransomware_live | — |
| Gate Precast | October 4, 2022 | ransomware_live | — |
| Rick Shipman Construction | October 4, 2022 | ransomware_live | — |
| Karl Gemünden GmbH & Co. KG | September 30, 2022 | ransomware_live | — |
| Associated Bag | September 29, 2022 | ransomware_live | — |
| STADLER | September 27, 2022 | ransomware_live | — |
| Etna GmbH | September 27, 2022 | ransomware_live | — |
| AES Clean Technology | September 27, 2022 | ransomware_live | — |
| KOLLITSCH | September 25, 2022 | ransomware_live | — |
| Cornerstone Insurance Group | September 23, 2022 | ransomware_live | — |
| Foreman Watson Land Title, LLC. | September 21, 2022 | ransomware_live | — |
| Admiral Merchants | September 21, 2022 | ransomware_live | — |
| CORNERSTONE | September 20, 2022 | ransomware_live | — |
| midway | September 19, 2022 | ransomware_live | — |
| MGSMFG | September 8, 2022 | ransomware_live | — |
| SHI | September 7, 2022 | ransomware_live | — |
| STEVENG | September 7, 2022 | ransomware_live | — |
| EMEPLATING | September 7, 2022 | ransomware_live | — |
| psico | September 5, 2022 | ransomware_live | — |
| augustacoop | September 5, 2022 | ransomware_live | — |
| CleanTech | September 5, 2022 | ransomware_live | — |
| C2CORP | September 4, 2022 | ransomware_live | — |
| Cpl Architects, Engineers | September 4, 2022 | ransomware_live | — |
| Grohmann Aluworks GmbH & Co | August 6, 2022 | ransomware_live | — |
| UNIWELL Rohrsysteme GmbH & Co. | August 6, 2022 | ransomware_live | — |
| Wilks Tire & Battery Service | August 6, 2022 | ransomware_live | — |
| Blairex Laboratories, Inc. | August 6, 2022 | ransomware_live | — |
| The O'Regan | August 6, 2022 | ransomware_live | — |
| Love, Barnes & McKew Insurance Adjusters | August 6, 2022 | ransomware_live | — |
| Jakob Becker | August 6, 2022 | ransomware_live | — |
| Young & Pratt | August 6, 2022 | ransomware_live | — |
| BOERNER-GRUPPE | August 6, 2022 | ransomware_live | — |
| RBBUSA | August 6, 2022 | ransomware_live | — |
| CREMO | August 6, 2022 | ransomware_live | — |
| Trade-Mark Industrial Inc. | August 6, 2022 | ransomware_live | — |
| WENZEL + WENZEL | August 6, 2022 | ransomware_live | — |
| paradise | August 6, 2022 | ransomware_live | — |
| WALLWORKINC | August 6, 2022 | ransomware_live | — |
| Montrose Environmental Group, Inc | August 6, 2022 | ransomware_live | — |
| MAI | August 6, 2022 | ransomware_live | — |
| ttdwest | August 6, 2022 | ransomware_live | — |
| The Minka Group | July 20, 2022 | ransomware_live | — |
| COS2000 | July 20, 2022 | ransomware_live | — |
| Dillon Precision Products | July 18, 2022 | ransomware_live | — |
| Wallwork Truck Center | July 18, 2022 | ransomware_live | — |
| KNAUF | July 18, 2022 | ransomware_live | — |
| The Wiener Zeitung media group | July 7, 2022 | ransomware_live | — |
| OLYMPIA | July 7, 2022 | ransomware_live | — |
| DPP | July 6, 2022 | ransomware_live | — |
| JBKLDMN | July 6, 2022 | ransomware_live | — |
| SCHMIDT Gruppe Service GmbH | July 6, 2022 | ransomware_live | — |
| LOSSEWERK | July 6, 2022 | ransomware_live | — |
| Roche Bobois | July 6, 2022 | ransomware_live | — |
| Jinny Beauty Supply | July 6, 2022 | ransomware_live | — |
| DEKIMO | July 6, 2022 | ransomware_live | — |
| Sierra Pacific Industries | July 6, 2022 | ransomware_live | — |
| TMI | July 6, 2022 | ransomware_live | — |
| MAIN | July 6, 2022 | ransomware_live | — |
| OLYMPIATILE | July 6, 2022 | ransomware_live | — |
| Wipro HealthPlan Services | July 6, 2022 | ransomware_live | — |
| LYDECKER | July 6, 2022 | ransomware_live | — |
| RENZEL | July 6, 2022 | ransomware_live | — |
| LOKALTOG | July 6, 2022 | ransomware_live | — |
| V2 Logistics Corp | July 3, 2022 | ransomware_live | — |
| CAPSONIC | July 3, 2022 | ransomware_live | — |
| New Peoples Bank | June 29, 2022 | ransomware_live | — |
| Elbit Systems of America | June 26, 2022 | ransomware_live | — |
| GRUPO mh | June 21, 2022 | ransomware_live | — |
| PARADOX | June 21, 2022 | ransomware_live | — |
| Crane Carrier Company | June 21, 2022 | ransomware_live | — |
| Mechanical Systems Company | June 21, 2022 | ransomware_live | — |
| Canaropa | June 21, 2022 | ransomware_live | — |
| RadiciGroup | June 15, 2022 | ransomware_live | — |
| Bernd Hösele Group | June 14, 2022 | ransomware_live | — |
| SDZ Druck und Medien | June 12, 2022 | ransomware_live | — |
| Worldwide Flight Services | June 10, 2022 | ransomware_live | — |
| Tiroler Rohre GmbH | June 10, 2022 | ransomware_live | — |
| English Construction Company | June 8, 2022 | ransomware_live | — |
| Losberger De Boer | June 7, 2022 | ransomware_live | — |
| JBS TEXTILE GROUP | June 1, 2022 | ransomware_live | — |
| Groupe J.F. Nadeau Inc | June 1, 2022 | ransomware_live | — |
| CAVENDERS | May 31, 2022 | ransomware_live | — |
| BLAIR inc. | May 29, 2022 | ransomware_live | — |
| undefined | May 28, 2022 | ransomware_live | — |
| AGCO | May 25, 2022 | ransomware_live | — |
| Allports Group | May 24, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).