Ransomware Group: BLACKBASTA

VICTIM NAME: gfm-uk[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BLACKBASTA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for GFM, a leading facilities management company in Great Britain, specifies that the incident was discovered on October 14, 2024. The page indicates significant data was compromised, totaling approximately 300GB, which includes corporate, non-disclosure agreements, confidential data, and personal employee documents. Additionally, information related to clients and customers was reportedly accessed. GFM prides itself on strong relationships with over 100 clients and offers a comprehensive range of services that can be customized or delivered as a singular offering. The company publicly presents itself as innovative and integrated in its approaches to facilities management.

The leak has been attributed to the ransomware group Black Basta. The page also includes visuals, with a screenshot illustrating the nature of the leak, though specifics have been sanitized for confidentiality. Notes indicate that no employee information or third-party data was specifically identified in the leak details. The firm operates out of Harrogate, UK, emphasizing tailored business services. For further reference, GFM’s official website can be visited, but it is advised to proceed with caution due to the nature of the compromise.