Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 524 published victims and 3 known leak locations in a single intelligence view.

Victims 524 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 553 days Days since the latest known victim
Top country United States 187 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 524 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion
    Leak location 2 Onion service Unknown aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 3 Onion service Unknown bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (524)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 201–300 of 524.

    Type Target Discovered Country Business Category Intel Link
    Ransomware vyera.com id10067 View details United States Energy
    Ransomware hallidays.co.uk id10066 View details United Kingdom Energy
    Ransomware kohlwholesale.com id10047 View details United States Communication / Marketing
    Ransomware thirdstreetbrewhouse.com carolinabeveragegroup.com id9999 View details United States Energy
    Ransomware agy.com id9996 View details United States Communication / Marketing
    Ransomware alexander-dennis.com id9995 View details United States Manufacturing / Engineering
    Ransomware nlt.com id9840 View details United States Manufacturing / Engineering
    Ransomware inseinc.com id9826 View details United Kingdom IT
    Ransomware andersonandjones.com id9797 View details United States Finance / Legal / Insurance
    Ransomware jacobsfarmdelcabo.com id9790 View details United States Agriculture / Food
    Ransomware jlgmarine.com id9632 View details United Kingdom Energy
    Ransomware agrovi.dk id9627 View details Denmark Finance / Legal / Insurance
    Ransomware arenaproducts.com id9626 View details United States Communication / Marketing
    Ransomware etude-villa.fr id9625 View details France Energy
    Ransomware edc.dk id9603 View details Denmark Energy
    Ransomware uchlogistics.co.uk id9581 View details United Kingdom Transportation / Travel / Logistics
    Ransomware citycontainer.dk id9580 View details Denmark Public Sector
    Ransomware agromatic.de id9546 View details Germany Communication / Marketing
    Ransomware cmcsheetmetal.com id9545 View details United States Manufacturing / Engineering
    Ransomware rekord.de id9544 View details Germany Communication / Marketing
    Ransomware boulangerieauger.com id9543 View details Canada Finance / Legal / Insurance
    Ransomware maytec.de id9542 View details Germany Communication / Marketing
    Ransomware shopbentley.com id9532 View details Canada Retail / E-commerce
    Ransomware ayakitchens.com id9481 View details Canada Communication / Marketing
    Ransomware browardfactory.com id9480 View details United States Communication / Marketing
    Ransomware boslogistics.eu id9479 View details Netherlands Transportation / Travel / Logistics
    Ransomware califanocarrelli.it id9447 View details Italy Communication / Marketing
    Ransomware h-tube.com id9433 View details France Manufacturing / Engineering
    Ransomware torrescpa.com id9432 View details United States Finance / Legal / Insurance
    Ransomware tt-engineering.nl id9431 View details Netherlands Manufacturing / Engineering
    Ransomware nicecloud.nl id9430 View details Netherlands IT
    Ransomware triflex.nl id9429 View details Netherlands Communication / Marketing
    Ransomware cozwolle.nl id9428 View details Netherlands Communication / Marketing
    Ransomware acawtrustfunds.ca id9424 View details Canada Healthcare / Pharma
    Ransomware secci.ca id9423 View details Canada Communication / Marketing
    Ransomware sacksteinlaw.com id9415 View details United States Finance / Legal / Insurance
    Ransomware imancorp.es id9347 View details Spain Communication / Marketing
    Ransomware strongtie.com id9326 View details United States Services
    Ransomware ampersand.tv id9325 View details United States Communication / Marketing
    Ransomware baccarat.com id9324 View details France Communication / Marketing
    Ransomware piemmeonline.it id9323 View details Italy Communication / Marketing
    Ransomware fortive.com id9322 View details United States Services
    Ransomware gannons.co.uk id9321 View details United Kingdom Finance / Legal / Insurance
    Ransomware gsp.com.br id9320 View details Brazil Communication / Marketing
    Ransomware edwardian.com id9318 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware bionpharma.com id9317 View details United States Healthcare / Pharma
    Ransomware stantonwilliams.com id9316 View details United Kingdom Communication / Marketing
    Ransomware hugohaeffner.com id9315 View details Germany Communication / Marketing
    Ransomware intred.it id9314 View details Italy IT
    Ransomware VOLEX.COM id9240 View details United Kingdom Manufacturing / Engineering
    Ransomware Fortive Corporation id9228 View details United States Services
    Ransomware Panificio Grandolfo id9188 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware Panetteria Grandolfo id9170 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware Simpson Strong-Tie id9169 View details United States Services
    Ransomware STANTON WILLIAMS id9119 View details United Kingdom Communication / Marketing
    Ransomware Edwardian Hotels London id9118 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware HAFFNER GmbH Co. id9117 View details Communication / Marketing
    Ransomware Intred id9116 View details Italy IT
    Ransomware Ampersand id9115 View details United States Communication / Marketing
    Ransomware BACCARAT id9114 View details France Communication / Marketing
    Ransomware PIEMME S.p.A. id9113 View details Italy Communication / Marketing
    Ransomware DOMAIN-BACCARAT_2 id9098 View details France Communication / Marketing
    Ransomware NCC_2 id9097 View details United States Communication / Marketing
    Ransomware STANTONWILLIAMS id9042 View details United Kingdom Communication / Marketing
    Ransomware REH id9041 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware HAEFFNER-ASP id9040 View details Germany Communication / Marketing
    Ransomware GREGAGG id9039 View details Other
    Ransomware GROUPHC id8224 View details Germany Construction / Real Estate
    Ransomware ALLIANCE id8178 View details Services
    Ransomware DEUTSCHELEASING id8177 View details Switzerland Services
    Ransomware VDVEN id8176 View details Netherlands Communication / Marketing
    Ransomware SYNQUESTLABS id8175 View details Japan Communication / Marketing
    Ransomware TWINTOWER id8174 View details United States Communication / Marketing
    Ransomware All States Ag Parts id7973 View details Manufacturing / Engineering
    Ransomware EDVMS id7442 View details Germany Communication / Marketing
    Ransomware BION_2 id7430 View details United States Healthcare / Pharma
    Ransomware Bartlett id7408 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Blount Fine Foods id7095 View details United States Agriculture / Food
    Ransomware Blount id7094 View details United States Agriculture / Food
    Ransomware GraphTec id7042 View details United States Communication / Marketing
    Ransomware MODERNIND_2 id7041 View details Communication / Marketing
    Ransomware GIAMBELLI id7040 View details Italy Communication / Marketing
    Ransomware M&M Industries id6994 View details Manufacturing / Engineering
    Ransomware MORSEMOVING id6958 View details United States Communication / Marketing
    Ransomware Marchant Schmidt id6853 View details United States Manufacturing / Engineering
    Ransomware Hill AeroSystems Inc. id6826 View details Manufacturing / Engineering
    Ransomware Regal West Corporation id6825 View details United States Transportation / Travel / Logistics
    Ransomware TAGAVIA id6805 View details Other
    Ransomware RoadSafe Traffic Systems id6783 View details United States Communication / Marketing
    Ransomware BOBST id6740 View details Switzerland Communication / Marketing
    Ransomware Sur La Table id6688 View details United States Retail / E-commerce
    Ransomware McCarthy Fingar id6678 View details Finance / Legal / Insurance
    Ransomware Rheinmetall AG id6477 View details Germany Manufacturing / Engineering
    Ransomware AVIAREPS id6456 View details Germany Communication / Marketing
    Ransomware FR id6337 View details United States Public Sector
    Ransomware Carrington id6332 View details Canada Communication / Marketing
    Ransomware Lincoln Wood Products id6331 View details United States Communication / Marketing
    Ransomware MEADE TRACTOR id6330 View details Communication / Marketing
    Ransomware Colvillbanks id6293 View details United Kingdom Finance / Legal / Insurance
    Ransomware TAMMAC id6283 View details United States Communication / Marketing