Ransomware Group: BLACKBASTA

VICTIM NAME: andyfrain[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BLACKBASTA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with Andy Frain Services, an established professional services company based in the United States, has recently surfaced on the dark web. Founded in 1924, Andy Frain Services has a historical significance in the industry, initially gaining recognition for providing professional ushering services at prominent Chicago venues. The page reveals that a significant amount of sensitive organizational data—approximately 750 GB—has been compromised. This data encompasses critical areas such as Accounting, Human Resources, Legal, Contracts, and Payroll among others, impacting the company’s operations and potentially affecting stakeholders.

The leak was discovered on November 28, 2024, and is attributed to a ransomware group known as Black Basta. This incident highlights the increasing threat posed by cybercriminals to longstanding businesses like Andy Frain Services. The page also indicates that various external third parties are involved, suggesting a wider impact beyond the company itself. Alongside this, it is mentioned that there are screenshots available which portray internal documents, although specific details or links to the content are not disclosed. The organization is under significant scrutiny given the sensitive nature of the leak and the critical data involved.