R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/blackbasta

blackbasta

Inactive

"Black Basta" is a new ransomware strain discovered during April 2022 - looks in dev since at least early February 2022 - and due to their ability to quickly amass new victims and the style of their negotiations, this is likely not a new operation but rather a rebrand of a previous top-tier ransomware gang that brought along their affiliates.

524
Victims
3
Sites

Known Leak Sites

stniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onionDLS
aazsbsgya565vlu2c6bzy6yfiebkcbtvvcytvolt33s77xypi7nypxyd.onionDLS
bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onionChat

Victims (524)

Live
schuff.com
blackbastaUS
granbyindustries.com
blackbastaUS
plasmatherm.com
blackbastaUS
arunestates.co.uk
blackbastaGB
brachot.com
blackbastaBE
avril.ca
blackbastaCA
migonline.com
blackbastaUS
bnext.nl
blackbastaNL
fote.com
blackbastaUS
bender.de
blackbastaDE
valveworksusa.com
blackbastaUS
wikov.com
blackbastaCZ
activedynamics.com
blackbastaCA
bathfitter.com
blackbastaCA
grimaldialliance.com
blackbastaIT
medion.com
blackbastaDE
furmanos.com
blackbastaUS
interspiro.com
blackbastaUS
hamptonsecurities.com
blackbastaCA
g-s.co.uk
blackbastaGB
cafezupas.com
blackbastaUS
westbankcorp.com
blackbastaCA
btci.com
blackbastaGB
beko-technologies.com
blackbastaDE
snatt.it
blackbastaIT

Top Targeted Countries

Unknown192
United States176
United Kingdom38
Germany26
Canada24

Profile

:
:
:

Activity

Total victims524
Countries affected26
Last seen