blackbasta
First seen April 26, 2022Active525 claimed victims
The claims below are reproduced as posted by blackbasta on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Elkuch Group | May 22, 2022 | ransomware_live | — |
| Contractors Pipe and Supply Corporation | May 19, 2022 | ransomware_live | — |
| Piggly Wiggly Alabama Distributing Company | May 16, 2022 | ransomware_live | — |
| Black Bros. Co. | May 10, 2022 | ransomware_live | — |
| Flexible Circuit Technologies | May 9, 2022 | ransomware_live | — |
| Fachgroßhandel | May 9, 2022 | ransomware_live | — |
| Cavender | May 9, 2022 | ransomware_live | — |
| Sole Technology | May 5, 2022 | ransomware_live | — |
| Rollecate Group | May 5, 2022 | ransomware_live | — |
| Zito Media | May 4, 2022 | ransomware_live | — |
| The Scholz Group | May 2, 2022 | ransomware_live | — |
| PRGX Global Inc. | May 2, 2022 | ransomware_live | — |
| Jameco Electronics | May 2, 2022 | ransomware_live | — |
| Ragle Incorporated | April 28, 2022 | ransomware_live | — |
| Deutsche Windtechnik | April 26, 2022 | ransomware_live | — |
| Basler Versicherungen | April 26, 2022 | ransomware_live | — |
| LACKS | April 26, 2022 | ransomware_live | — |
| IMA Schelling Group | April 26, 2022 | ransomware_live | — |
| Laiteries Reunies Societe cooperative | April 26, 2022 | ransomware_live | — |
| LECHLER S.p.A. | April 26, 2022 | ransomware_live | — |
| Boswell Engineering | April 26, 2022 | ransomware_live | — |
| Oralia | April 26, 2022 | ransomware_live | — |
| Plauen Stahl Technologie GmbH | April 26, 2022 | ransomware_live | — |
| TÜV NORD GROUP | April 26, 2022 | ransomware_live | — |
| ADA | April 26, 2022 | ransomware_live | — |
← NewerPage 6 of 6
Claim data from ransomware.live and RansomLook (CC BY 4.0).