Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 526 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 526 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 618 days Days since the latest known victim
Top country United States 189 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 526 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 526 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 3 Onion service Down checked 2h ago bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion
    Leak location 2 Onion service Down checked 2h ago aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 1 Onion service Down checked 2h ago stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion

    Top Activity Sectors (16)

    Victims (526)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 101–200 of 526.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware macphie.com id12067 View details United Kingdom Agriculture / Food pending
    Ransomware cavotec.com id12066 View details Switzerland Communication / Marketing pending
    Ransomware hymer-alu.de id12065 View details Germany Manufacturing / Engineering pending
    Ransomware azdel.com id12064 View details United States Services pending
    Ransomware doyon.com | doyondrilling.com id11712 View details United States Energy pending
    Ransomware processsolutions.com id11591 View details United States Communication / Marketing pending
    Ransomware numotion.com id11590 View details United States Communication / Marketing pending
    Ransomware siemensmfg.com id11589 View details United States IT pending
    Ransomware Parklane Group id11588 View details United Kingdom Communication / Marketing pending
    Ransomware sermo.com id11587 View details United States Healthcare / Pharma pending
    Ransomware schlesingerlaw.com id11586 View details United States Finance / Legal / Insurance pending
    Ransomware robar.com id11585 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware atlascontainer.com id11584 View details United States Communication / Marketing pending
    Ransomware patersoncooke.com id11583 View details South Africa Services pending
    Ransomware arch-con.com id11582 View details United States Construction / Real Estate pending
    Ransomware columbiapipe.com id11579 View details United States Communication / Marketing pending
    Ransomware pdq-airspares.co.uk id11468 View details United Kingdom Communication / Marketing pending
    Ransomware vilis.com id11426 View details Australia Services pending
    Ransomware pstrans.com id11425 View details United States Transportation / Travel / Logistics pending
    Ransomware fpdcompany.com id11424 View details United States Finance / Legal / Insurance pending
    Ransomware northamericansigns.com id11423 View details United States Communication / Marketing pending
    Ransomware otrwheel.com id11422 View details United States Manufacturing / Engineering pending
    Ransomware prodrive.com id11421 View details United States Communication / Marketing pending
    Ransomware dgse.com id11420 View details United States Communication / Marketing pending
    Ransomware bulwarkpestcontrol.com id11416 View details United States Services pending
    Ransomware lagunitas.com id11415 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware carolinafoodsinc.com id11414 View details United States Agriculture / Food pending
    Ransomware ero-etikett.com id11413 View details Germany Communication / Marketing pending
    Ransomware amerlux.com id11412 View details United States Communication / Marketing pending
    Ransomware organizedliving.com id11411 View details United States Communication / Marketing pending
    Ransomware mjcelco.com id11410 View details United States Manufacturing / Engineering pending
    Ransomware kmbdg.com id11409 View details United States Communication / Marketing pending
    Ransomware pctinternational.com id11408 View details United States Communication / Marketing pending
    Ransomware theshootingwarehouse.com id11407 View details United States Transportation / Travel / Logistics pending
    Ransomware flynncompanies.com id11338 View details Canada Communication / Marketing pending
    Ransomware igf-inc.com id11293 View details United States Communication / Marketing pending
    Ransomware logistasolutions.com id11292 View details United States Services pending
    Ransomware oceaneering.com id11291 View details United States Communication / Marketing pending
    Ransomware interluxury.com id11290 View details Switzerland Other pending
    Ransomware activeconceptsllc.com id11265 View details United States Communication / Marketing pending
    Ransomware gfad.de id11220 View details Germany Services pending
    Ransomware duvel.com | boulevard.com id11201 View details Belgium Communication / Marketing pending
    Ransomware xcelbrands.com id11197 View details United States Communication / Marketing pending
    Ransomware cpacsystems.se id11196 View details Sweden Communication / Marketing pending
    Ransomware elmatic.de id11195 View details Germany IT pending
    Ransomware keystonetech.com id11194 View details United States IT pending
    Ransomware dutyfreeamericas.com id11193 View details United States Finance / Legal / Insurance pending
    Ransomware sierralobo.com id11192 View details United States Manufacturing / Engineering pending
    Ransomware contechs.co.uk id11191 View details United Kingdom IT pending
    Ransomware creativeenvironments.com id11190 View details United States Communication / Marketing pending
    Ransomware linksunlimited.com id11189 View details United States Communication / Marketing pending
    Ransomware imperialtrading.com id11188 View details United States Retail / E-commerce pending
    Ransomware hvd.host id11038 View details Australia Finance / Legal / Insurance pending
    Ransomware goodinabernathy.com id11032 View details India Finance / Legal / Insurance pending
    Ransomware scullionlaw.com id11031 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware fcw.ch id11030 View details Switzerland Finance / Legal / Insurance pending
    Ransomware haas4.com id11029 View details United States Communication / Marketing pending
    Ransomware alanritchey.com id11028 View details United States Services pending
    Ransomware team.jobs id10940 View details Switzerland Healthcare / Pharma pending
    Ransomware nfllp.com id10935 View details United States Communication / Marketing pending
    Ransomware climatech.com id10934 View details United States IT pending
    Ransomware usmerchants.com id10933 View details United States Communication / Marketing pending
    Ransomware birchallfoodservice.co.uk id10932 View details United Kingdom Agriculture / Food pending
    Ransomware dilweg.com id10931 View details United States Communication / Marketing pending
    Ransomware zircodata.com id10930 View details Australia Services pending
    Ransomware dasteam.ch id10921 View details Switzerland Healthcare / Pharma pending
    Ransomware pacifica.co.uk id10873 View details United Kingdom Services pending
    Ransomware barberemerson.com id10825 View details India Finance / Legal / Insurance pending
    Ransomware ffppkg.co.uk id10824 View details United Kingdom Communication / Marketing pending
    Ransomware patriziapepe.com id10823 View details Italy Communication / Marketing pending
    Ransomware btl.info id10822 View details Germany IT pending
    Ransomware globalrescue.com id10821 View details United States Healthcare / Pharma pending
    Ransomware ssmnlaw.com id10820 View details United States Finance / Legal / Insurance pending
    Ransomware leonardssyrups.com id10819 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware willislease.com id10733 View details United States Finance / Legal / Insurance pending
    Ransomware asecos.com id10680 View details Germany Communication / Marketing pending
    Ransomware sipicorp.com id10581 View details United States Finance / Legal / Insurance pending
    Ransomware leclairgroup.com id10570 View details United States Finance / Legal / Insurance pending
    Ransomware fairmontfcu.com id10530 View details United States Finance / Legal / Insurance pending
    Ransomware ktbslaw.com id10529 View details United States Finance / Legal / Insurance pending
    Ransomware dupont-restauration.fr id10528 View details France Other pending
    Ransomware kivibros.com id10527 View details Canada Transportation / Travel / Logistics pending
    Ransomware haes.ca id10526 View details Canada Communication / Marketing pending
    Ransomware cinfab.com id10525 View details United States Manufacturing / Engineering pending
    Ransomware prudentpublishing.com id10524 View details United States Communication / Marketing pending
    Ransomware unitedindustries.co.nz id10523 View details New Zealand Manufacturing / Engineering pending
    Ransomware stemcor.com id10522 View details United Kingdom Communication / Marketing pending
    Ransomware envea.global id10516 View details France Communication / Marketing pending
    Ransomware agc.com id10509 View details Japan Communication / Marketing pending
    Ransomware southernwater.co.uk id10507 View details United Kingdom Communication / Marketing pending
    Ransomware graebener-group.com id10347 View details Germany Energy pending
    Ransomware leonardsexpress.com id10346 View details United States Communication / Marketing pending
    Ransomware nals.com id10345 View details United States Communication / Marketing pending
    Ransomware americanalarm.com id10325 View details United States Communication / Marketing pending
    Ransomware webblaw.com id10316 View details United States Finance / Legal / Insurance pending
    Ransomware whafh.com id10266 View details United States Energy pending
    Ransomware hotelplan.co.uk id10265 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware brintons.co.uk id10085 View details United Kingdom Communication / Marketing pending
    Ransomware pecofoods.com id10084 View details United States Agriculture / Food pending
    Ransomware navitaspet.com id10068 View details Canada Energy pending