Black Basta ransomware group lists baccarat.com on its leak site

• Ransomware group: Black Basta
• Country: France
• Sector: Manufacturing
• Announcement date: November 1, 2023

Black Basta claims data leak against Baccarat

The Black Basta ransomware group has published data allegedly belonging to the luxury crystal manufacturer Baccarat on their leak site. This announcement, which appeared on the group's platform, indicates a significant breach involving the sensitive information of a prominent French organization.

Details of the alleged attack

The Black Basta group has announced a data leak claim against Baccarat through their platform. According to the group's announcement, various documents have been published that are claimed to have been obtained from the organization's internal systems. The announcement was listed on November 1, 2023, and the group claims that the data has been accessible since this date.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to release sensitive information publicly if a ransom is not paid. This method is designed to maximize the impact of the attack by targeting the organization's reputation and regulatory standing.

Information allegedly involved in the leak

The content of the leak, as evidenced by available screenshots, includes specific categories of sensitive information. The leaked data is said to include copies of employee passports and personnel records, specifically identified by the title 'Liste du Personnel'.

The affected data types include:

• Passport copies
• Personnel records

While the specific volume of the data and the exact number of files involved remain unknown, the nature of the documents suggests a focus on internal human resources information.

About Baccarat

Founded in 1764, Baccarat is a long-established French company specializing in the design, manufacturing, and retail of luxury crystal products. Operating in areas such as lighting, tableware, decorative objects, and jewelry, the brand is recognized worldwide as a symbol of the French art of living.

Risk assessment and implications

The allegedly leaked data may pose a high risk due to the inclusion of employee identity information. This situation could lead to identity theft and targeted phishing attacks for the affected individuals. As the organization is based in France, the incident may be evaluated as a data protection breach under GDPR.

Furthermore, as the Black Basta group is assessed to have links to Conti, it may be necessary for the organization to review its network security processes. A secondary risk is that the leaked data could be utilized in supply chain attacks, where attackers leverage information from one partner to gain access to others in the business network.

For organizations in the manufacturing and luxury sectors, such incidents highlight the importance of robust network security and data protection protocols. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining strict access controls, and conducting regular security audits to identify vulnerabilities before they can be exploited by sophisticated ransomware groups.