Ransomware Group intelligence

Blackbasta

Inactive

Track Blackbasta with 526 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 526 Known published victims in this dataset
First discovered 2022-04-26 Earliest victim discovery date
Last discovered 2025-01-11 Latest victim discovery date
Inactive since 618 days Days since the latest known victim
Top country United States 189 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Blackbasta is tracked by Breach House as a ransomware group with 526 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 526 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 3 Onion service Down checked 2h ago bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion
    Leak location 2 Onion service Down checked 2h ago aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onion
    Leak location 1 Onion service Down checked 2h ago stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onion

    Top Activity Sectors (16)

    Victims (526)

    Search, filter and paginate the victim timeline for Blackbasta. Showing 201–300 of 526.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware vyera.com id10067 View details United States Energy pending
    Ransomware hallidays.co.uk id10066 View details United Kingdom Energy pending
    Ransomware kohlwholesale.com id10047 View details United States Communication / Marketing pending
    Ransomware thirdstreetbrewhouse.com carolinabeveragegroup.com id9999 View details United States Energy pending
    Ransomware agy.com id9996 View details United States Communication / Marketing pending
    Ransomware alexander-dennis.com id9995 View details United States Manufacturing / Engineering pending
    Ransomware nlt.com id9840 View details United States Manufacturing / Engineering pending
    Ransomware inseinc.com id9826 View details United Kingdom IT pending
    Ransomware andersonandjones.com id9797 View details United States Finance / Legal / Insurance pending
    Ransomware jacobsfarmdelcabo.com id9790 View details United States Agriculture / Food pending
    Ransomware jlgmarine.com id9632 View details United Kingdom Energy pending
    Ransomware agrovi.dk id9627 View details Denmark Finance / Legal / Insurance pending
    Ransomware arenaproducts.com id9626 View details United States Communication / Marketing pending
    Ransomware etude-villa.fr id9625 View details France Energy pending
    Ransomware edc.dk id9603 View details Denmark Energy pending
    Ransomware uchlogistics.co.uk id9581 View details United Kingdom Transportation / Travel / Logistics pending
    Ransomware citycontainer.dk id9580 View details Denmark Public Sector pending
    Ransomware agromatic.de id9546 View details Germany Communication / Marketing pending
    Ransomware cmcsheetmetal.com id9545 View details United States Manufacturing / Engineering pending
    Ransomware rekord.de id9544 View details Germany Communication / Marketing pending
    Ransomware boulangerieauger.com id9543 View details Canada Finance / Legal / Insurance pending
    Ransomware maytec.de id9542 View details Germany Communication / Marketing pending
    Ransomware shopbentley.com id9532 View details Canada Retail / E-commerce pending
    Ransomware ayakitchens.com id9481 View details Canada Communication / Marketing pending
    Ransomware browardfactory.com id9480 View details United States Communication / Marketing pending
    Ransomware boslogistics.eu id9479 View details Netherlands Transportation / Travel / Logistics pending
    Ransomware califanocarrelli.it id9447 View details Italy Communication / Marketing pending
    Ransomware h-tube.com id9433 View details France Manufacturing / Engineering pending
    Ransomware torrescpa.com id9432 View details United States Finance / Legal / Insurance pending
    Ransomware tt-engineering.nl id9431 View details Netherlands Manufacturing / Engineering pending
    Ransomware nicecloud.nl id9430 View details Netherlands IT pending
    Ransomware triflex.nl id9429 View details Netherlands Communication / Marketing pending
    Ransomware cozwolle.nl id9428 View details Netherlands Communication / Marketing pending
    Ransomware acawtrustfunds.ca id9424 View details Canada Healthcare / Pharma pending
    Ransomware secci.ca id9423 View details Canada Communication / Marketing pending
    Ransomware sacksteinlaw.com id9415 View details United States Finance / Legal / Insurance pending
    Ransomware imancorp.es id9347 View details Spain Communication / Marketing pending
    Ransomware strongtie.com id9326 View details United States Services pending
    Ransomware ampersand.tv id9325 View details United States Communication / Marketing pending
    Ransomware baccarat.com id9324 View details France Communication / Marketing pending
    Ransomware piemmeonline.it id9323 View details Italy Communication / Marketing pending
    Ransomware fortive.com id9322 View details United States Services pending
    Ransomware gannons.co.uk id9321 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware gsp.com.br id9320 View details Brazil Communication / Marketing pending
    Ransomware edwardian.com id9318 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware bionpharma.com id9317 View details United States Healthcare / Pharma pending
    Ransomware stantonwilliams.com id9316 View details United Kingdom Communication / Marketing pending
    Ransomware hugohaeffner.com id9315 View details Germany Communication / Marketing pending
    Ransomware intred.it id9314 View details Italy IT pending
    Ransomware VOLEX.COM id9240 View details United Kingdom Manufacturing / Engineering pending
    Ransomware Fortive Corporation id9228 View details United States Services pending
    Ransomware Panificio Grandolfo id9188 View details Italy Hospitality / Food & Beverage / Tourism pending
    Ransomware Panetteria Grandolfo id9170 View details Italy Hospitality / Food & Beverage / Tourism pending
    Ransomware Simpson Strong-Tie id9169 View details United States Services pending
    Ransomware STANTON WILLIAMS id9119 View details United Kingdom Communication / Marketing pending
    Ransomware Edwardian Hotels London id9118 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware HAFFNER GmbH Co. id9117 View details Communication / Marketing pending
    Ransomware Intred id9116 View details Italy IT pending
    Ransomware Ampersand id9115 View details United States Communication / Marketing pending
    Ransomware BACCARAT id9114 View details France Communication / Marketing pending
    Ransomware PIEMME S.p.A. id9113 View details Italy Communication / Marketing pending
    Ransomware DOMAIN-BACCARAT_2 id9098 View details France Communication / Marketing pending
    Ransomware NCC_2 id9097 View details United States Communication / Marketing pending
    Ransomware STANTONWILLIAMS id9042 View details United Kingdom Communication / Marketing pending
    Ransomware REH id9041 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware HAEFFNER-ASP id9040 View details Germany Communication / Marketing pending
    Ransomware GREGAGG id9039 View details Other pending
    Ransomware GROUPHC id8224 View details Germany Construction / Real Estate pending
    Ransomware ALLIANCE id8178 View details Services pending
    Ransomware DEUTSCHELEASING id8177 View details Switzerland Services pending
    Ransomware VDVEN id8176 View details Netherlands Communication / Marketing pending
    Ransomware SYNQUESTLABS id8175 View details Japan Communication / Marketing pending
    Ransomware TWINTOWER id8174 View details United States Communication / Marketing pending
    Ransomware All States Ag Parts id7973 View details Manufacturing / Engineering pending
    Ransomware EDVMS id7442 View details Germany Communication / Marketing pending
    Ransomware BION_2 id7430 View details United States Healthcare / Pharma pending
    Ransomware Bartlett id7408 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware Blount Fine Foods id7095 View details United States Agriculture / Food pending
    Ransomware Blount id7094 View details United States Agriculture / Food pending
    Ransomware GraphTec id7042 View details United States Communication / Marketing pending
    Ransomware MODERNIND_2 id7041 View details Communication / Marketing pending
    Ransomware GIAMBELLI id7040 View details Italy Communication / Marketing pending
    Ransomware M&M Industries id6994 View details Manufacturing / Engineering pending
    Ransomware MORSEMOVING id6958 View details United States Communication / Marketing pending
    Ransomware Marchant Schmidt id6853 View details United States Manufacturing / Engineering pending
    Ransomware Hill AeroSystems Inc. id6826 View details Manufacturing / Engineering pending
    Ransomware Regal West Corporation id6825 View details United States Transportation / Travel / Logistics pending
    Ransomware TAGAVIA id6805 View details Other pending
    Ransomware RoadSafe Traffic Systems id6783 View details United States Communication / Marketing pending
    Ransomware BOBST id6740 View details Switzerland Communication / Marketing pending
    Ransomware Sur La Table id6688 View details United States Retail / E-commerce pending
    Ransomware McCarthy Fingar id6678 View details Finance / Legal / Insurance pending
    Ransomware Rheinmetall AG id6477 View details Germany Manufacturing / Engineering pending
    Ransomware AVIAREPS id6456 View details Germany Communication / Marketing pending
    Ransomware FR id6337 View details United States Public Sector pending
    Ransomware Carrington id6332 View details Canada Communication / Marketing pending
    Ransomware Lincoln Wood Products id6331 View details United States Communication / Marketing pending
    Ransomware MEADE TRACTOR id6330 View details Communication / Marketing pending
    Ransomware Colvillbanks id6293 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware TAMMAC id6283 View details United States Communication / Marketing pending