Black Basta lists gannons.co.uk on leak site claiming a data breach

• Ransomware group: Black Basta
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: November 1, 2023

Black Basta claims data breach against gannons.co.uk

The threat actor known as Black Basta has listed the domain gannons.co.uk on their leak portal. By publishing this listing, the group claims that data belonging to the organization has been acquired. The announcement regarding this alleged breach was published on November 1, 2023.

Details of the alleged event

According to the information provided by the threat actor, the listing was officially posted on their leak site on November 1, 2023. This type of activity is characteristic of modern ransomware operations, where groups use public-facing leak sites to pressure organizations. In these scenarios, the group often employs a double extortion tactic, where they not only encrypt an organization's systems but also threaten to release sensitive information to the public if a ransom is not met.

While the group has made this public claim, there is currently no detailed information regarding the nature of the alleged leaked data. The provided screenshot associated with the claim does not contain any specific document samples belonging to gannons.co.uk, leaving the exact scope of the incident unverified through the available public evidence.

Organization profile

Gannons is a UK-based law firm providing specialized legal advisory services for entrepreneurs and small to medium-sized enterprises (SMEs). Headquartered in London, the firm focuses primarily on commercial law, tax, and corporate law.

Risk assessment and industry implications

The Black Basta group emerged in early 2022 and may have ties to Conti. Given that the organization operates in the professional services sector, there is a possibility that the leaked data could contain client information or trade secrets. This situation may lead to legal obligations under the UK GDPR.

The publication of such data could result in a loss of trust among the organization's clients and potentially lead to secondary risks such as targeted phishing attacks. Considering the group's past activities, it is foreseeable that the data breach process may create operational risks for the organization.

For organizations operating within the professional services sector, such incidents highlight the critical importance of robust data protection frameworks. General defensive steps for organizations facing these threats include maintaining rigorous backup protocols, implementing multi-factor authentication across all access points, and conducting regular security awareness training to mitigate the risk of phishing. Furthermore, maintaining a comprehensive incident response plan is essential for managing the operational and legal consequences that follow a potential data exposure.