Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 526 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 526 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 618 days Days since the latest known victim
Top country United States 189 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 526 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 526 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 3 Onion service Down checked 3h ago bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion
    Leak location 2 Onion service Down checked 3h ago aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 1 Onion service Down checked 3h ago stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion

    Top Activity Sectors (16)

    Victims (526)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 1–100 of 526.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware schuff.com id16589 View details United States Manufacturing / Engineering pending
    Ransomware granbyindustries.com id16588 View details United States Communication / Marketing pending
    Ransomware plasmatherm.com id16587 View details United States Communication / Marketing pending
    Ransomware arunestates.co.uk id16586 View details United Kingdom Construction / Real Estate pending
    Ransomware brachot.com id16585 View details Belgium Finance / Legal / Insurance pending
    Ransomware avril.ca id16584 View details Canada Communication / Marketing pending
    Ransomware migonline.com id16583 View details United States Communication / Marketing pending
    Ransomware bnext.nl id16582 View details Netherlands Construction / Real Estate pending
    Ransomware fote.com id16172 View details United States Communication / Marketing pending
    Ransomware bender.de id16171 View details Germany Communication / Marketing pending
    Ransomware valveworksusa.com id16170 View details United States Public Sector pending
    Ransomware wikov.com id16169 View details Czechia Communication / Marketing pending
    Ransomware activedynamics.com id16167 View details Canada Manufacturing / Engineering pending
    Ransomware bathfitter.com id16166 View details Canada Communication / Marketing pending
    Ransomware grimaldialliance.com id16165 View details Italy Finance / Legal / Insurance pending
    Ransomware medion.com id16164 View details Germany Finance / Legal / Insurance pending
    Ransomware furmanos.com id16158 View details United States Agriculture / Food pending
    Ransomware interspiro.com id15976 View details United States Communication / Marketing pending
    Ransomware hamptonsecurities.com id15856 View details Canada Finance / Legal / Insurance pending
    Ransomware g-s.co.uk id15855 View details United Kingdom Communication / Marketing pending
    Ransomware cafezupas.com id15854 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware westbankcorp.com id15853 View details Canada Finance / Legal / Insurance pending
    Ransomware btci.com id15852 View details United Kingdom Telecommunications pending
    Ransomware beko-technologies.com id15851 View details Germany IT pending
    Ransomware snatt.it id15850 View details Italy Finance / Legal / Insurance pending
    Ransomware medicacorp.com id15849 View details United States Finance / Legal / Insurance pending
    Ransomware lornestewartgroup.com id15848 View details United Kingdom Communication / Marketing pending
    Ransomware vossko.de id15847 View details Germany Communication / Marketing pending
    Ransomware mcleanmortgage.com id15711 View details United States Finance / Legal / Insurance pending
    Ransomware suit-kote.com id15710 View details United States Communication / Marketing pending
    Ransomware andyfrain.com id15709 View details United States Services pending
    Ransomware rembe.de id15473 View details Germany Healthcare / Pharma pending
    Ransomware gfemlaw.com id15467 View details United States Finance / Legal / Insurance pending
    Ransomware instinctpetfood.com id15466 View details United States Agriculture / Food pending
    Ransomware eatonmetal.com id15465 View details United States Manufacturing / Engineering pending
    Ransomware continentalserves.com id15464 View details United States IT pending
    Ransomware wachter.com id15463 View details United States IT pending
    Ransomware jonti-craft.com id15462 View details United States Finance / Legal / Insurance pending
    Ransomware isaitaly.com id15461 View details Italy Communication / Marketing pending
    Ransomware rockportmortgage.com id15460 View details United States Healthcare / Pharma pending
    Ransomware kmcglobal.com id15459 View details United States Manufacturing / Engineering pending
    Ransomware rauch.de id15458 View details Germany Communication / Marketing pending
    Ransomware daserv.com id15048 View details United States Finance / Legal / Insurance pending
    Ransomware celo.com id15047 View details United States Finance / Legal / Insurance pending
    Ransomware rosenlegal.com id15045 View details United States Finance / Legal / Insurance pending
    Ransomware weberpackaging.com id15044 View details United States Finance / Legal / Insurance pending
    Ransomware tuggleduggins.com id14950 View details United States Finance / Legal / Insurance pending
    Ransomware temple-inc.com id14877 View details United States Public Sector pending
    Ransomware milleredge.com id14876 View details United States Finance / Legal / Insurance pending
    Ransomware gkcorp.com id14875 View details United States Communication / Marketing pending
    Ransomware ssbwc.com id14874 View details United States Communication / Marketing pending
    Ransomware lewa.com id14873 View details Austria Communication / Marketing pending
    Ransomware gfm-uk.com id14752 View details United Kingdom Services pending
    Ransomware caseparts.com id14751 View details United States Manufacturing / Engineering pending
    Ransomware northernsafety.com id14309 View details United States Finance / Legal / Insurance pending
    Ransomware thompsoncreek.com id14308 View details Canada Communication / Marketing pending
    Ransomware memc.com id13473 View details United States Manufacturing / Engineering pending
    Ransomware posiplus.com id13362 View details Canada Telecommunications pending
    Ransomware hpecds.com id13361 View details United States Communication / Marketing pending
    Ransomware usdermpartners.com id13357 View details United States Other pending
    Ransomware atos.com id13356 View details Italy Communication / Marketing pending
    Ransomware thompsoncreek.com_wa id13351 View details United States Communication / Marketing pending
    Ransomware northernsafety.com_wa id13350 View details United States Finance / Legal / Insurance pending
    Ransomware lambertz.de id13208 View details Germany Retail / E-commerce pending
    Ransomware keybenefit.com id13150 View details United States Finance / Legal / Insurance pending
    Ransomware scrubsandbeyond.com id13149 View details United States Healthcare / Pharma pending
    Ransomware pkaufmann.com id13047 View details United States Communication / Marketing pending
    Ransomware modplan.co.uk id13046 View details United Kingdom Communication / Marketing pending
    Ransomware wielton.com.pl id13045 View details Poland Services pending
    Ransomware grupoamper.com id13044 View details Spain Communication / Marketing pending
    Ransomware mgfsourcing.com id13035 View details Viet Nam Retail / E-commerce pending
    Ransomware talalayglobal.com id12924 View details United States Communication / Marketing pending
    Ransomware akdenizchemson.com id12923 View details Australia Communication / Marketing pending
    Ransomware robson.com id12912 View details United States Finance / Legal / Insurance pending
    Ransomware elutia.com id12911 View details United States Healthcare / Pharma pending
    Ransomware ssiworld.com id12910 View details United States Manufacturing / Engineering pending
    Ransomware driver-group.com id12909 View details United Kingdom Services pending
    Ransomware dynasafe.com id12896 View details Sweden Other pending
    Ransomware keytronic.com id12788 View details United States Manufacturing / Engineering pending
    Ransomware levian.com id12645 View details United States Finance / Legal / Insurance pending
    Ransomware lactanet.ca id12644 View details Canada Agriculture / Food pending
    Ransomware mfgroup.it id12643 View details Italy Manufacturing / Engineering pending
    Ransomware grupocadarso.com id12642 View details Portugal Hospitality / Food & Beverage / Tourism pending
    Ransomware atlasoil.com id12641 View details United States Energy pending
    Ransomware trugreen.com id12640 View details United States Finance / Legal / Insurance pending
    Ransomware cmactrans.com id12282 View details United States Transportation / Travel / Logistics pending
    Ransomware ids-michigan.com id12281 View details United States Manufacturing / Engineering pending
    Ransomware provencherroy.ca id12280 View details Canada Communication / Marketing pending
    Ransomware swisspro.ch id12279 View details Switzerland Communication / Marketing pending
    Ransomware olsonsteel.com id12278 View details United States Manufacturing / Engineering pending
    Ransomware teaspa.it id12277 View details Italy Services pending
    Ransomware ayesa.com id12276 View details Spain IT pending
    Ransomware synlab.com id12275 View details Germany Healthcare / Pharma pending
    Ransomware active-pcb.com id12274 View details United Kingdom Communication / Marketing pending
    Ransomware gai-it.com id12273 View details Italy Communication / Marketing pending
    Ransomware thelawrencegroup.com id12266 View details United States Finance / Legal / Insurance pending
    Ransomware bdcm.com id12202 View details United States Services pending
    Ransomware thelawrencegroup.com_privat id12165 View details United States Finance / Legal / Insurance pending
    Ransomware true.co.uk id12125 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware fluenthome.com id12068 View details United States Communication / Marketing pending