Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 524 published victims and 3 known leak locations in a single intelligence view.

Victims 524 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 553 days Days since the latest known victim
Top country United States 187 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 524 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion
    Leak location 2 Onion service Unknown aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 3 Onion service Unknown bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (524)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 101–200 of 524.

    Type Target Discovered Country Business Category Intel Link
    Ransomware macphie.com id12067 View details United Kingdom Agriculture / Food
    Ransomware cavotec.com id12066 View details Switzerland Communication / Marketing
    Ransomware hymer-alu.de id12065 View details Germany Manufacturing / Engineering
    Ransomware azdel.com id12064 View details United States Services
    Ransomware doyon.com | doyondrilling.com id11712 View details United States Energy
    Ransomware processsolutions.com id11591 View details United States Communication / Marketing
    Ransomware numotion.com id11590 View details United States Communication / Marketing
    Ransomware siemensmfg.com id11589 View details United States IT
    Ransomware Parklane Group id11588 View details United Kingdom Communication / Marketing
    Ransomware sermo.com id11587 View details United States Healthcare / Pharma
    Ransomware schlesingerlaw.com id11586 View details United States Finance / Legal / Insurance
    Ransomware robar.com id11585 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware atlascontainer.com id11584 View details United States Communication / Marketing
    Ransomware patersoncooke.com id11583 View details South Africa Services
    Ransomware arch-con.com id11582 View details United States Construction / Real Estate
    Ransomware columbiapipe.com id11579 View details United States Communication / Marketing
    Ransomware pdq-airspares.co.uk id11468 View details United Kingdom Communication / Marketing
    Ransomware vilis.com id11426 View details Australia Services
    Ransomware pstrans.com id11425 View details United States Transportation / Travel / Logistics
    Ransomware fpdcompany.com id11424 View details United States Finance / Legal / Insurance
    Ransomware northamericansigns.com id11423 View details United States Communication / Marketing
    Ransomware otrwheel.com id11422 View details United States Manufacturing / Engineering
    Ransomware prodrive.com id11421 View details United States Communication / Marketing
    Ransomware dgse.com id11420 View details United States Communication / Marketing
    Ransomware bulwarkpestcontrol.com id11416 View details United States Services
    Ransomware lagunitas.com id11415 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware carolinafoodsinc.com id11414 View details United States Agriculture / Food
    Ransomware ero-etikett.com id11413 View details Germany Communication / Marketing
    Ransomware amerlux.com id11412 View details United States Communication / Marketing
    Ransomware organizedliving.com id11411 View details United States Communication / Marketing
    Ransomware mjcelco.com id11410 View details United States Manufacturing / Engineering
    Ransomware kmbdg.com id11409 View details United States Communication / Marketing
    Ransomware pctinternational.com id11408 View details United States Communication / Marketing
    Ransomware theshootingwarehouse.com id11407 View details United States Transportation / Travel / Logistics
    Ransomware flynncompanies.com id11338 View details Canada Communication / Marketing
    Ransomware igf-inc.com id11293 View details United States Communication / Marketing
    Ransomware logistasolutions.com id11292 View details United States Services
    Ransomware oceaneering.com id11291 View details United States Communication / Marketing
    Ransomware interluxury.com id11290 View details Switzerland Other
    Ransomware activeconceptsllc.com id11265 View details United States Communication / Marketing
    Ransomware gfad.de id11220 View details Germany Services
    Ransomware duvel.com | boulevard.com id11201 View details Belgium Communication / Marketing
    Ransomware xcelbrands.com id11197 View details United States Communication / Marketing
    Ransomware cpacsystems.se id11196 View details Sweden Communication / Marketing
    Ransomware elmatic.de id11195 View details Germany IT
    Ransomware keystonetech.com id11194 View details United States IT
    Ransomware dutyfreeamericas.com id11193 View details United States Finance / Legal / Insurance
    Ransomware sierralobo.com id11192 View details United States Manufacturing / Engineering
    Ransomware contechs.co.uk id11191 View details United Kingdom IT
    Ransomware creativeenvironments.com id11190 View details United States Communication / Marketing
    Ransomware linksunlimited.com id11189 View details United States Communication / Marketing
    Ransomware imperialtrading.com id11188 View details United States Retail / E-commerce
    Ransomware hvd.host id11038 View details Australia Finance / Legal / Insurance
    Ransomware goodinabernathy.com id11032 View details India Finance / Legal / Insurance
    Ransomware scullionlaw.com id11031 View details United Kingdom Finance / Legal / Insurance
    Ransomware fcw.ch id11030 View details Switzerland Finance / Legal / Insurance
    Ransomware haas4.com id11029 View details United States Communication / Marketing
    Ransomware alanritchey.com id11028 View details United States Services
    Ransomware team.jobs id10940 View details Switzerland Healthcare / Pharma
    Ransomware nfllp.com id10935 View details United States Communication / Marketing
    Ransomware climatech.com id10934 View details United States IT
    Ransomware usmerchants.com id10933 View details United States Communication / Marketing
    Ransomware birchallfoodservice.co.uk id10932 View details United Kingdom Agriculture / Food
    Ransomware dilweg.com id10931 View details United States Communication / Marketing
    Ransomware zircodata.com id10930 View details Australia Services
    Ransomware dasteam.ch id10921 View details Switzerland Healthcare / Pharma
    Ransomware pacifica.co.uk id10873 View details United Kingdom Services
    Ransomware barberemerson.com id10825 View details India Finance / Legal / Insurance
    Ransomware ffppkg.co.uk id10824 View details United Kingdom Communication / Marketing
    Ransomware patriziapepe.com id10823 View details Italy Communication / Marketing
    Ransomware btl.info id10822 View details Germany IT
    Ransomware globalrescue.com id10821 View details United States Healthcare / Pharma
    Ransomware ssmnlaw.com id10820 View details United States Finance / Legal / Insurance
    Ransomware leonardssyrups.com id10819 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware willislease.com id10733 View details United States Finance / Legal / Insurance
    Ransomware asecos.com id10680 View details Germany Communication / Marketing
    Ransomware sipicorp.com id10581 View details United States Finance / Legal / Insurance
    Ransomware leclairgroup.com id10570 View details United States Finance / Legal / Insurance
    Ransomware fairmontfcu.com id10530 View details United States Finance / Legal / Insurance
    Ransomware ktbslaw.com id10529 View details United States Finance / Legal / Insurance
    Ransomware dupont-restauration.fr id10528 View details France Other
    Ransomware kivibros.com id10527 View details Canada Transportation / Travel / Logistics
    Ransomware haes.ca id10526 View details Canada Communication / Marketing
    Ransomware cinfab.com id10525 View details United States Manufacturing / Engineering
    Ransomware prudentpublishing.com id10524 View details United States Communication / Marketing
    Ransomware unitedindustries.co.nz id10523 View details New Zealand Manufacturing / Engineering
    Ransomware stemcor.com id10522 View details United Kingdom Communication / Marketing
    Ransomware envea.global id10516 View details France Communication / Marketing
    Ransomware agc.com id10509 View details Japan Communication / Marketing
    Ransomware southernwater.co.uk id10507 View details United Kingdom Communication / Marketing
    Ransomware graebener-group.com id10347 View details Germany Energy
    Ransomware leonardsexpress.com id10346 View details United States Communication / Marketing
    Ransomware nals.com id10345 View details United States Communication / Marketing
    Ransomware americanalarm.com id10325 View details United States Communication / Marketing
    Ransomware webblaw.com id10316 View details United States Finance / Legal / Insurance
    Ransomware whafh.com id10266 View details United States Energy
    Ransomware hotelplan.co.uk id10265 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware brintons.co.uk id10085 View details United Kingdom Communication / Marketing
    Ransomware pecofoods.com id10084 View details United States Agriculture / Food
    Ransomware navitaspet.com id10068 View details Canada Energy