Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 524 published victims and 3 known leak locations in a single intelligence view.

Victims 524 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 553 days Days since the latest known victim
Top country United States 187 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 524 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion
    Leak location 2 Onion service Unknown aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 3 Onion service Unknown bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (524)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 1–100 of 524.

    Type Target Discovered Country Business Category Intel Link
    Ransomware schuff.com id16589 View details United States Manufacturing / Engineering
    Ransomware granbyindustries.com id16588 View details United States Communication / Marketing
    Ransomware plasmatherm.com id16587 View details United States Communication / Marketing
    Ransomware arunestates.co.uk id16586 View details United Kingdom Construction / Real Estate
    Ransomware brachot.com id16585 View details Belgium Finance / Legal / Insurance
    Ransomware avril.ca id16584 View details Canada Communication / Marketing
    Ransomware migonline.com id16583 View details United States Communication / Marketing
    Ransomware bnext.nl id16582 View details Netherlands Construction / Real Estate
    Ransomware fote.com id16172 View details United States Communication / Marketing
    Ransomware bender.de id16171 View details Germany Communication / Marketing
    Ransomware valveworksusa.com id16170 View details United States Public Sector
    Ransomware wikov.com id16169 View details Czechia Communication / Marketing
    Ransomware activedynamics.com id16167 View details Canada Manufacturing / Engineering
    Ransomware bathfitter.com id16166 View details Canada Communication / Marketing
    Ransomware grimaldialliance.com id16165 View details Italy Finance / Legal / Insurance
    Ransomware medion.com id16164 View details Germany Finance / Legal / Insurance
    Ransomware furmanos.com id16158 View details United States Agriculture / Food
    Ransomware interspiro.com id15976 View details United States Communication / Marketing
    Ransomware hamptonsecurities.com id15856 View details Canada Finance / Legal / Insurance
    Ransomware g-s.co.uk id15855 View details United Kingdom Communication / Marketing
    Ransomware cafezupas.com id15854 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware westbankcorp.com id15853 View details Canada Finance / Legal / Insurance
    Ransomware btci.com id15852 View details United Kingdom Telecommunications
    Ransomware beko-technologies.com id15851 View details Germany IT
    Ransomware snatt.it id15850 View details Italy Finance / Legal / Insurance
    Ransomware medicacorp.com id15849 View details United States Finance / Legal / Insurance
    Ransomware lornestewartgroup.com id15848 View details United Kingdom Communication / Marketing
    Ransomware vossko.de id15847 View details Germany Communication / Marketing
    Ransomware mcleanmortgage.com id15711 View details United States Finance / Legal / Insurance
    Ransomware suit-kote.com id15710 View details United States Communication / Marketing
    Ransomware andyfrain.com id15709 View details United States Services
    Ransomware rembe.de id15473 View details Germany Healthcare / Pharma
    Ransomware gfemlaw.com id15467 View details United States Finance / Legal / Insurance
    Ransomware instinctpetfood.com id15466 View details United States Agriculture / Food
    Ransomware eatonmetal.com id15465 View details United States Manufacturing / Engineering
    Ransomware continentalserves.com id15464 View details United States IT
    Ransomware wachter.com id15463 View details United States IT
    Ransomware jonti-craft.com id15462 View details United States Finance / Legal / Insurance
    Ransomware isaitaly.com id15461 View details Italy Communication / Marketing
    Ransomware rockportmortgage.com id15460 View details United States Healthcare / Pharma
    Ransomware kmcglobal.com id15459 View details United States Manufacturing / Engineering
    Ransomware rauch.de id15458 View details Germany Communication / Marketing
    Ransomware daserv.com id15048 View details United States Finance / Legal / Insurance
    Ransomware celo.com id15047 View details United States Finance / Legal / Insurance
    Ransomware rosenlegal.com id15045 View details United States Finance / Legal / Insurance
    Ransomware weberpackaging.com id15044 View details United States Finance / Legal / Insurance
    Ransomware tuggleduggins.com id14950 View details United States Finance / Legal / Insurance
    Ransomware temple-inc.com id14877 View details United States Public Sector
    Ransomware milleredge.com id14876 View details United States Finance / Legal / Insurance
    Ransomware gkcorp.com id14875 View details United States Communication / Marketing
    Ransomware ssbwc.com id14874 View details United States Communication / Marketing
    Ransomware lewa.com id14873 View details Austria Communication / Marketing
    Ransomware gfm-uk.com id14752 View details United Kingdom Services
    Ransomware caseparts.com id14751 View details United States Manufacturing / Engineering
    Ransomware northernsafety.com id14309 View details United States Finance / Legal / Insurance
    Ransomware thompsoncreek.com id14308 View details Canada Communication / Marketing
    Ransomware memc.com id13473 View details United States Manufacturing / Engineering
    Ransomware posiplus.com id13362 View details Canada Telecommunications
    Ransomware hpecds.com id13361 View details United States Communication / Marketing
    Ransomware usdermpartners.com id13357 View details United States Other
    Ransomware atos.com id13356 View details Italy Communication / Marketing
    Ransomware thompsoncreek.com_wa id13351 View details United States Communication / Marketing
    Ransomware northernsafety.com_wa id13350 View details United States Finance / Legal / Insurance
    Ransomware lambertz.de id13208 View details Germany Retail / E-commerce
    Ransomware keybenefit.com id13150 View details United States Finance / Legal / Insurance
    Ransomware scrubsandbeyond.com id13149 View details United States Healthcare / Pharma
    Ransomware pkaufmann.com id13047 View details United States Communication / Marketing
    Ransomware modplan.co.uk id13046 View details United Kingdom Communication / Marketing
    Ransomware wielton.com.pl id13045 View details Poland Services
    Ransomware grupoamper.com id13044 View details Spain Communication / Marketing
    Ransomware mgfsourcing.com id13035 View details Viet Nam Retail / E-commerce
    Ransomware talalayglobal.com id12924 View details United States Communication / Marketing
    Ransomware akdenizchemson.com id12923 View details Australia Communication / Marketing
    Ransomware robson.com id12912 View details United States Finance / Legal / Insurance
    Ransomware elutia.com id12911 View details United States Healthcare / Pharma
    Ransomware ssiworld.com id12910 View details United States Manufacturing / Engineering
    Ransomware driver-group.com id12909 View details United Kingdom Services
    Ransomware dynasafe.com id12896 View details Sweden Other
    Ransomware keytronic.com id12788 View details United States Manufacturing / Engineering
    Ransomware levian.com id12645 View details United States Finance / Legal / Insurance
    Ransomware lactanet.ca id12644 View details Canada Agriculture / Food
    Ransomware mfgroup.it id12643 View details Italy Manufacturing / Engineering
    Ransomware grupocadarso.com id12642 View details Portugal Hospitality / Food & Beverage / Tourism
    Ransomware atlasoil.com id12641 View details United States Energy
    Ransomware trugreen.com id12640 View details United States Finance / Legal / Insurance
    Ransomware cmactrans.com id12282 View details United States Transportation / Travel / Logistics
    Ransomware ids-michigan.com id12281 View details United States Manufacturing / Engineering
    Ransomware provencherroy.ca id12280 View details Canada Communication / Marketing
    Ransomware swisspro.ch id12279 View details Switzerland Communication / Marketing
    Ransomware olsonsteel.com id12278 View details United States Manufacturing / Engineering
    Ransomware teaspa.it id12277 View details Italy Services
    Ransomware ayesa.com id12276 View details Spain IT
    Ransomware synlab.com id12275 View details Germany Healthcare / Pharma
    Ransomware active-pcb.com id12274 View details United Kingdom Communication / Marketing
    Ransomware gai-it.com id12273 View details Italy Communication / Marketing
    Ransomware thelawrencegroup.com id12266 View details United States Finance / Legal / Insurance
    Ransomware bdcm.com id12202 View details United States Services
    Ransomware thelawrencegroup.com_privat id12165 View details United States Finance / Legal / Insurance
    Ransomware true.co.uk id12125 View details United Kingdom Finance / Legal / Insurance
    Ransomware fluenthome.com id12068 View details United States Communication / Marketing