Ransomware group
Blackbasta ransomware: victims and leak site activity
The Blackbasta ransomware group has listed 523 victims on its leak site since April 2022; its latest post is from 11 January 2025. Most affected countries: United States, United Kingdom and Germany. Most targeted sector: Manufacturing.
Total posts
523
First seen
2022-04-26
Latest post
2025-01-11
Countries hit
25
About Blackbasta
"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.
Most targeted countries
- United States 187
- United Kingdom 39
- Germany 28
- Canada 27
- Italy 18
- Switzerland 8
- France 7
- Netherlands 7
- Australia 4
- Spain 4
Most targeted sectors
- Manufacturing 159
- Professional Services 129
- Technology 43
- Agriculture and Food Production 39
- Transportation 30
- Retail & E-Commerce 28
- Financial Services 24
- Healthcare 18
- Energy & Utilities 10
- Hospitality 10