Ransomware Group: BLACKBASTA

VICTIM NAME: celo[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BLACKBASTA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page associated with the victim identified as CELO, a technology company based in the United States, reveals significant data compromises. CELO specializes in designing and manufacturing high-precision fixing and fastening solutions for the industrial and construction sectors. The data breach was discovered on October 29, 2024, and pertains to approximately 250 GB of information, which includes sensitive departments such as Human Resources, Finance, Accounting, and Payroll. The compromised data may also consist of personal employee folders, tax data related to 401(k) plans, and client information. Screenshots of internal documents are included on the page, providing insights into the extent of the data exposure.

The ransomware group responsible for the attack is identified as BlackBasta. They have outlined the nature of the compromised information, which encompasses records of seven users and domain data from four third-party entities. The latest updates regarding the leak were noted just minutes before the leak page went live, indicating a coordinated effort to publicize the attack. This incident underscores the increasingly sophisticated tactics used in ransomware attacks, particularly targeting sensitive sectors within technology and construction industries, revealing the vulnerabilities that companies like CELO face in safeguarding their data.