THREAT ACTOR
BLACKBASTA_
DormantBLACKBASTA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of BLACKBASTA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
490
Victims tracked
0 / 17
Active mirrors
2022-08-18
First listing
2025-01-11
Most recent
Victims by year
- 2025 8
- 2024 185
- 2023 147
- 2022 150
Leak site mirrors
17 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion403 Forbidden snapshot · 2025-01-29 13:03 -
bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onionChat Black Basta snapshot · 2025-02-20 17:20 -
6y2qjrzzt4inluxzygdfxccym5qjy2ltyae7vnxtoyeotfg3ljwqtaid.onion403 Forbidden snapshot · 2025-01-23 11:21 -
r6qkk55wxvy2ziy47oyhptesucwdqqaip23uxregdgquq5oxxlpeecad.onion403 Forbidden snapshot · 2025-01-29 14:13 -
weqv4fxkacebqrjd3lmnss6lrmoxoyihtcc6kdc6mblbv62p5q6skgid.onion403 Forbidden snapshot · 2025-01-23 12:03 -
thesiliconroad1.topthesiliconroad1.top snapshot · 2025-08-13 00:06 -
stuffstevenpeters4.topstuffstevenpeters4.top snapshot · 2025-08-13 00:11 -
greenmotors5.topgreenmotors5.top snapshot · 2025-08-13 00:46 -
megatron3.topmegatron3.top snapshot · 2025-03-21 00:16 -
fmzipzpirdpfelbbvnfhoehqxbqg7s7efmgce6hpr5xdcmeazdmic2id.onion403 Forbidden snapshot · 2025-01-23 11:18 -
daulpxe3epdysjozaujz4sj7rytanp4suvdnebxkwdfcuzwxlslebvyd.onion403 Forbidden snapshot · 2025-01-29 15:01 -
databasebb3.topdatabasebb3.top snapshot · 2025-08-13 00:46 -
l6zxfn3u2s4bl4vt3nvpve6uibqn3he3tgwdpkeeplhwlfwy3ifbt5id.onion403 Forbidden snapshot · 2025-01-29 15:22 -
onlylegalstuff6.topsnapshot · 2024-10-03 01:38 -
aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onionsnapshot · 2024-12-09 18:45 -
bpeln2aqs66qqfuex2cvcyjiy5ggcwbyh5nbmxzxt6daamkmpmufv4qd.onionsnapshot · 2025-02-21 04:40 -
ond5arqab77n6tykvi4aqp7oqegqdfgqfyf7fzyhfyhmbp7iafpzdtad.onionsnapshot · 2025-02-24 20:30
Recent victims
The 50 most recent victims claimed by BLACKBASTA. Total in the index: 490.
| Date listed | Victim | Description |
|---|---|---|
| 2025-01-11 | schuff.com | Schuff Steel Company is one of the largest structural steel fabricatio… |
| 2025-01-11 | granbyindustries.com | Granby Industries, founded in 1954, is a leading manufacturer and dist… |
| 2025-01-11 | plasmatherm.com | Plasma-Therm is a prominent global manufacturer specializing in advanc… |
| 2025-01-11 | arunestates.co.uk | Arun Estates is an independent estate agency based in the South East o… |
| 2025-01-11 | brachot.com | Brachot is a leading specialist in natural stone and blended materials… |
| 2025-01-11 | avril.ca | Avril Supermarché Santé, an independent health food supermarket chain … |
| 2025-01-11 | migonline.com | Mortgage Investors Group (MIG) is a prominent mortgage lender based in… |
| 2025-01-11 | bnext.nl | Bnext.nl is a Dutch company specializing in sustainable waste manageme… |
| 2024-12-18 | activedynamics.com | |
| 2024-12-18 | bender.de | |
| 2024-12-18 | fote.com | |
| 2024-12-18 | furmanos.com | |
| 2024-12-18 | valveworksusa.com | |
| 2024-12-18 | wikov.com | |
| 2024-12-18 | grimaldialliance.com | |
| 2024-12-18 | bathfitter.com | |
| 2024-12-18 | medion.com | |
| 2024-12-04 | hamptonsecurities.com | |
| 2024-12-04 | g-s.co.uk | |
| 2024-12-04 | cafezupas.com | |
| 2024-12-04 | westbankcorp.com | |
| 2024-12-04 | btci.com | |
| 2024-12-04 | beko-technologies.com | |
| 2024-12-04 | snatt.it | |
| 2024-12-04 | medicacorp.com | |
| 2024-12-04 | lornestewartgroup.com | |
| 2024-12-04 | vossko.de | |
| 2024-11-19 | rembe.de | |
| 2024-11-19 | rauch.de | |
| 2024-11-19 | wachter.com | |
| 2024-11-19 | rockportmortgage.com | |
| 2024-11-19 | kmcglobal.com | |
| 2024-11-19 | jonti-craft.com | |
| 2024-11-19 | isaitaly.com | |
| 2024-11-19 | instinctpetfood.com | |
| 2024-11-19 | gfemlaw.com | |
| 2024-11-19 | eatonmetal.com | |
| 2024-11-19 | continentalserves.com | |
| 2024-11-19 | suit-kote.com | |
| 2024-11-19 | mithun.com | |
| 2024-11-19 | mcleanmortgage.com | |
| 2024-11-19 | andyfrain.com | |
| 2024-10-29 | weberpackaging.com | |
| 2024-10-29 | rosenlegal.com | |
| 2024-10-29 | daserv.com | |
| 2024-10-29 | celo.com | |
| 2024-10-24 | tuggleduggins.com | |
| 2024-10-21 | lewa.com | |
| 2024-10-21 | temple-inc.com | |
| 2024-10-21 | ssbwc.com |
CONFIRMED ATTACKS
Black Basta confirmed attacks: 174 verified incidents
Ransomnews has verified 174 Black Basta incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2021 to December 2024. United States accounts for 108 of them (62%), with victims recorded in 15 countries in total. The most affected sector is manufacturing, at 43 confirmed victims. A ransom payment was publicly confirmed in 4 cases and publicly refused in 16; the outcome is unrecorded in the remaining 154. Where a figure was disclosed (89 cases), these incidents account for 11,960,757 exposed records.
174Verified incidents
15Countries
2021–2024Active range
20%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Black Basta incidents (100 most recent of 174)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| December 2024 | Plasma-Therm (Raje Technology Group) | Manufacturing | Florida, United States | — | Unknown | Source |
| December 2024 | Bath Fitter | Retail | Quebec, Canada | 3,451 | Unknown | Source |
| December 2024 | Mortgage Investors Group (MIG) | Finance | Tennessee, United States | — | Unknown | Source |
| December 2024 | Bnext.nl | Utilities | Houten, Netherlands | — | Unknown | Source |
| December 2024 | Avril Supermarché Santé | Food and Beverage | Granby, Canada | — | Unknown | Source |
| December 2024 | BEKO TECHNOLOGIES GMBH | Manufacturing | Neuss, Germany | — | Unknown | Source |
| November 2024 | Snatt Logistica S.p.A. | Transportation | Campegine, Italy | — | Unknown | Source |
| November 2024 | Bender GmbH & Co. KG | Manufacturing | Hessen, Germany | — | Unknown | Source |
| November 2024 | Medica Corporation | Healthcare | Massachusetts, United States | 150 | Unknown | Source |
| November 2024 | Vossko GmbH & Co. KG | Food and Beverage | Ostbevern, Germany | — | Unknown | Source |
| October 2024 | McLean Mortgage Corporation | Finance | Virginia, United States | 30,453 | Unknown | Source |
| October 2024 | Gleason, Flynn, Emig, and McAfee, Chartered | Legal | Maryland, United States | 4,771 | Unknown | Source |
| October 2024 | Weber Packaging Solutions | Manufacturing | Illinois, United States | 414 | Unknown | Source |
| October 2024 | Andy Frain Services, Inc. | Service | Illinois, United States | 100,964 | Unknown | Source |
| October 2024 | Jonti-Craft, Inc. | Manufacturing | Minnesota, United States | 1,776 | Unknown | Source |
| October 2024 | Suit-Kote Corporation | Manufacturing | New York, United States | 6,890 | Unknown | Source |
| October 2024 | Café Zupas | Food and Beverage | Utah, United States | 26,925 | Unknown | Source |
| October 2024 | Furmano Foods, Inc. (Furmano's) | Food and Beverage | Pennsylvania, United States | 2,365 | Unknown | Source |
| October 2024 | BT Group | Utilities | London, United Kingdom | — | Unknown | Source |
| October 2024 | NIER Ingegneria S.p.A. | Service | Bologna, Italy | — | Unknown | Source |
| October 2024 | Instinct Pet Food | Food and Beverage | Missouri, United States | 1,909 | Unknown | Source |
| October 2024 | Rockport Mortgage Corporation | Finance | Massachusetts, United States | 1,029 | Unknown | Source |
| October 2024 | ISA S.p.A. | Manufacturing | Bastia Umbra, Italy | — | Unknown | Source |
| September 2024 | Tuggle Duggins P.A. | Legal | North Carolina, United States | 851 | Unknown | Source |
| June 2024 | 301 Scrubs Investors, LLC d/b/a Scrubs & Beyond LLC d/b/a Kindthread | Retail | Missouri, United States | 21,898 | Unknown | Source |
| June 2024 | Northern Safety Co., Inc. | Retail | New York, United States | 1,873 | Unknown | Source |
| June 2024 | GlobalWafers Co., Ltd. | Manufacturing | Hsinchu, Taiwan | 10,780 | Unknown | Source |
| May 2024 | Grupo Cadarso | Other | Barcelona, Spain | — | Unknown | Source |
| May 2024 | P/Kaufmann Inc. | Manufacturing | New York, United States | 900 | Unknown | Source |
| May 2024 | Key Benefit Administrators | Finance | Indiana, United States | — | Unknown | Source |
| May 2024 | Henry Lambertz GmbH Co KG | Food and Beverage | Aachen, Germany | — | Unknown | Source |
| May 2024 | Wielton SA | Manufacturing | Wieluń, Poland | — | Unknown | Source |
| May 2024 | Lactanet | Food and Beverage | Quebec, Canada | — | Unknown | Source |
| May 2024 | Keytronic | Manufacturing | Washington, United States | — | Unknown | Source |
| May 2024 | Ascension | Healthcare | Missouri, United States | 5,599,699 | Unknown | Source |
| April 2024 | Doyon, Limited | Other | Alaska, United States | 995 | Unknown | Source |
| April 2024 | Olson & Co Steel, Inc. | Construction | California, United States | — | Unknown | Source |
| April 2024 | Ayesa | Technology | Seville, Spain | — | Unknown | Source |
| April 2024 | Gruppo Tea | Utilities | Mantua, Italy | — | Unknown | Source |
| April 2024 | Swisspro AG | Technology | Zürich, Switzerland | — | No | Source |
| April 2024 | SYNLAB Italia | Healthcare | Monza, Italy | — | No | Source |
| March 2024 | WorldOne Inc. dba Sermo | Healthcare | New York, United States | 2,674 | Unknown | Source |
| March 2024 | KMB Design Group, LLC | Service | New Jersey, United States | 876 | Unknown | Source |
| March 2024 | Carolina Foods | Food and Beverage | North Carolina, United States | 3,614 | Unknown | Source |
| March 2024 | Organized Living | Service | Ohio, United States | 1,061 | Unknown | Source |
| March 2024 | Le Vian Corp. | Retail | New York, United States | 1,104 | Unknown | Source |
| March 2024 | Lagunitas Brewing Company | Food and Beverage | California, United States | 2,979 | Unknown | Source |
| March 2024 | Amerlux LLC | Manufacturing | New Jersey, United States | 574 | Unknown | Source |
| February 2024 | U.S. Merchants Financial Group, Inc. | Manufacturing | California, United States | 20,392 | Unknown | Source |
| February 2024 | North American Signs, Inc. | Service | Indiana, United States | 473 | Unknown | Source |
| February 2024 | Scullion LAW | Legal | Glasgow, United Kingdom | — | Unknown | Source |
| February 2024 | United Seating and Mobility, L.L.C., d/b/a Numotion | Healthcare | Tennessee, United States | 698,577 | Unknown | Source |
| February 2024 | Alan Ritchey, Inc. | Transportation | Texas, United States | 12,885 | Unknown | Source |
| February 2024 | Newman Ferrara LLP | Legal | New York, United States | — | Unknown | Source |
| February 2024 | Sanford, Pierson, Thone & Strean, PLC | Legal | Minnesota, United States | 3,100 | Unknown | Source |
| February 2024 | Sierra Lobo, Inc. | Manufacturing | Ohio, United States | 1,991 | Unknown | Source |
| February 2024 | International Gourmet Foods | Food and Beverage | Virginia, United States | — | Unknown | Source |
| February 2024 | ZircoDATA | Service | Bentleigh, Australia | 60,000 | Unknown | Source |
| February 2024 | Franz Carl Weber Ag | Retail | Zurich, Switzerland | — | Unknown | Source |
| February 2024 | Birchall Foodservice | Food and Beverage | Burnley, United Kingdom | — | Unknown | Source |
| January 2024 | Fairmont Federal Credit Union | Finance | West Virginia, United States | 187,038 | Unknown | Source |
| January 2024 | Hyundai Motor Europe | Manufacturing | Offenbach am Main, Germany | — | Unknown | Source |
| January 2024 | Southern Water | Utilities | Worthing, United Kingdom | 230,000 | Unknown | Source |
| January 2024 | Willis Lease Finance Corporation | Finance | Florida, United States | — | Unknown | Source |
| December 2023 | KTBS Law LLP | Legal | California, United States | 6,923 | Unknown | Source |
| December 2023 | Peco Foods, Inc. | Food and Beverage | Alabama, United States | 48,170 | Unknown | Source |
| December 2023 | Wolf Haldenstein Adler Freeman & Herz LLP | Legal | New York, United States | 3,445,537 | Unknown | Source |
| December 2023 | NALS Apartment Homes | Service | California, United States | 7,509 | Unknown | Source |
| December 2023 | Das Team AG | Service | Basel, Switzerland | — | No | Source |
| December 2023 | AGC America, Inc. | Manufacturing | Georgia, United States | 20,415 | Unknown | Source |
| December 2023 | Gräbener Maschinentechnik GmbH & Co. KG | Manufacturing | Netphen, Germany | — | Unknown | Source |
| December 2023 | Hotelplan UK Group | Other | Farnborough, United Kingdom | — | Unknown | Source |
| November 2023 | rekord-fenster+türen GmbH & Co. KG | Manufacturing | Dägeling, Germany | — | Unknown | Source |
| November 2023 | Agrovi | Service | Hillerød, Denmark | — | Unknown | Source |
| November 2023 | EDC Gruppen A/S | Service | Frederiksberg, Denmark | 700,000 | No | Source |
| November 2023 | City Container A/S | Utilities | Farum, Denmark | — | Unknown | Source |
| November 2023 | Anderson Jones PLLC | Legal | North Carolina, United States | — | Unknown | Source |
| November 2023 | Leonard’s Express | Transportation | New York, United States | 6,540 | Unknown | Source |
| November 2023 | AGY Holding Corp. | Manufacturing | South Carolina, United States | 2,024 | Unknown | Source |
| November 2023 | American Alarm and Communications, Inc. | Service | Massachusetts, United States | 942 | Unknown | Source |
| November 2023 | Inspired Entertainment, Inc | Technology | New York, United States | — | Unknown | Source |
| November 2023 | AyA Kitchens | Manufacturing | Mississauga, Canada | — | Unknown | Source |
| November 2023 | ACAW Trust Funds | Finance | Edmonton, Canada | — | Unknown | Source |
| October 2023 | Simpson Manufacturing Co., Inc. (Simpson Strong Tie Company) | Manufacturing | California, United States | — | Unknown | Source |
| October 2023 | Toronto Public Library | Government | Toronto, Canada | — | No | Source |
| October 2023 | Volex | Manufacturing | Basingstoke, United Kingdom | — | Unknown | Source |
| October 2023 | Ampersand | Other | New York, United States | — | Unknown | Source |
| October 2023 | Servicio Nacional de Aduanas de Chile | Government | Valparaíso, Chile | — | No | Source |
| September 2023 | Baccarat | Retail | Paris, France | — | Unknown | Source |
| June 2023 | TAG Aviation | Transportation | Genève, Switzerland | — | Unknown | Source |
| May 2023 | Raleigh Housing Authority | Government | North Carolina, United States | — | Unknown | Source |
| May 2023 | Alliance Solutions Group dba TalentLaunch | Service | Ohio, United States | 119,261 | Unknown | Source |
| May 2023 | BankCard USA Merchant Services Inc. | Finance | California, United States | 10,312 | Yes | Source |
| May 2023 | Andromeda Systems, Inc. | Service | Virginia, United States | 2,670 | Unknown | Source |
| May 2023 | Adams Bank & Trust | Finance | Nebraska, United States | 23,819 | Unknown | Source |
| May 2023 | Auto-Teile-Unger (ATU) | Service | Weiden, Germany | — | Unknown | Source |
| May 2023 | HECKER WERNER HIMMELREICH Rechtsanwälte Partnerschaft mbB | Legal | Köln, Germany | — | Unknown | Source |
| May 2023 | ABB | Technology | Zurich, Switzerland | — | Unknown | Source |
| May 2023 | Deutsche Leasing Gruppe | Finance | Bad Homburg, Germany | — | No | Source |
| April 2023 | Alamos Gold | Other | Toronto, Canada | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Black Basta's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.