Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 524 published victims and 3 known leak locations in a single intelligence view.

Victims 524 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 553 days Days since the latest known victim
Top country United States 187 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 524 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion
    Leak location 2 Onion service Unknown aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 3 Onion service Unknown bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (524)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 501–524 of 524.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Contractors Pipe and Supply Corporation id3473 View details Construction / Real Estate
    Ransomware Piggly Wiggly Alabama Distributing Company id3450 View details United States Services
    Ransomware Black Bros. Co. id3410 View details Other
    Ransomware Cavender id3405 View details Other
    Ransomware Fachgroßhandel id3404 View details Other
    Ransomware Flexible Circuit Technologies id3403 View details IT
    Ransomware Rollecate Group id3389 View details Services
    Ransomware Sole Technology id3388 View details United States IT
    Ransomware Zito Media id3368 View details Communication / Marketing
    Ransomware Jameco Electronics id3355 View details Other
    Ransomware PRGX Global Inc. id3354 View details Communication / Marketing
    Ransomware The Scholz Group id3353 View details Services
    Ransomware Ragle Incorporated id3299 View details Services
    Ransomware ADA id3288 View details Other
    Ransomware TÜV NORD GROUP id3287 View details Services
    Ransomware Plauen Stahl Technologie GmbH id3286 View details IT
    Ransomware Oralia id3285 View details Other
    Ransomware Boswell Engineering id3284 View details Manufacturing / Engineering
    Ransomware LECHLER S.p.A. id3283 View details Other
    Ransomware Laiteries Reunies Societe cooperative id3282 View details Other
    Ransomware IMA Schelling Group id3281 View details Services
    Ransomware LACKS id3280 View details Other
    Ransomware Basler Versicherungen id3279 View details Other
    Ransomware Deutsche Windtechnik id3278 View details IT