ASMFC: Atlantic States Marine Fisheries Commission targeted by 8base ransomware group

• Ransomware group: 8base
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: April 15, 2024

The 8base ransomware group has officially listed the Atlantic States Marine Fisheries Commission (ASMFC) on its leak site, claiming that the organization has been targeted in a recent cyberattack. According to the announcement made on April 15, 2024, the threat actors allege that they have successfully exfiltrated various documents and sensitive information from the organization's servers.

Details of the alleged attack

The threat actor known as 8base has published a post on its dedicated leak site, asserting that a wide range of files obtained from the organization's servers will be released to the public. This action is characteristic of a double-extortion tactic, a method frequently employed by modern ransomware groups. In a double-extortion scenario, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish the stolen data, the group aims to exert maximum pressure on the victim to meet their demands.

The 8base group is recognized as a sophisticated entity that has been active since 2022. Despite previous interventions directed at the group's infrastructure in early 2025, their continued presence on leak sites suggests that their operational continuity may persist despite law enforcement or security industry efforts. The group's ability to maintain activity indicates a resilient operational structure that continues to target various organizations.

Claimed data and affected information

While the specific volume of the stolen data and the exact amount of the ransom demand remain unknown, the group has provided a screenshot to support their claims. This screenshot allegedly demonstrates the exfiltration of a diverse array of sensitive documents. The types of data claimed to be compromised include:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Personal files

The inclusion of such specific documentation, particularly employment contracts and confidentiality agreements, significantly increases the potential for secondary data breaches and heightened supply chain risks for the organization and its partners.

About the Atlantic States Marine Fisheries Commission

The Atlantic States Marine Fisheries Commission (ASMFC) is an interstate compact organization. It is tasked with the vital responsibility of managing and conserving fishery resources along the Atlantic coast of the United States. The commission works to develop policies that regulate marine resources, ensuring the economic well-being of coastal communities through sustainable management practices.

Risks and implications of the breach

This alleged data leak poses significant risks to the organization's employees and stakeholders. The exposure of personal data, employment contracts, and personal files can lead to severe consequences, such as identity theft and the execution of highly targeted phishing attacks. When attackers possess specific details about an organization's internal documents or personnel, they can craft much more convincing social engineering campaigns to further compromise the network.

Because the ASMFC is located in the United States, the nature of the compromised data may trigger complex legal and regulatory requirements. Depending on the specific types of information stolen, the organization may need to navigate compliance processes under various state-level data protection regulations as well as federal legislation. The intersection of environmental management and sensitive administrative data makes the protection of these records critical for maintaining public trust and operational integrity.

For organizations operating in similar sectors, such incidents underscore the necessity of robust data protection frameworks. Defensive strategies typically involve implementing strict access controls, maintaining comprehensive logging to detect unauthorized exfiltration, and ensuring that sensitive documents like confidentiality agreements are encrypted both at rest and in transit. Furthermore, because double-extortion relies on the threat of publication, organizations must prioritize the prevention of data exfiltration as a core component of their cybersecurity posture to mitigate the leverage held by groups like 8base.