Black Basta ransomware group lists jacobsfarmdelcabo.com on its leak site

• Ransomware group: Black Basta
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: November 29, 2023

Black Basta lists jacobsfarmdelcabo.com on leak site

The Black Basta ransomware group has listed jacobsfarmdelcabo.com on their leak site, claiming to have exfiltrated approximately 405 GB of data. This announcement, made on November 29, 2023, follows a claimed attack date of November 22, 2023. The threat actors have posted the organization's name on their platform as part of their ongoing operations.

Details of the alleged data breach

The Black Basta group has claimed a data breach involving jacobsfarmdelcabo.com by listing the entity on their leak site. The threat actors allege that they have obtained 405 GB of data. This volume of information is significant and represents a major potential exposure for the organization. No information was provided regarding the specific ransom demand or the total file count associated with this incident.

According to the claims made by the group, the stolen information includes various sensitive categories. The data said to be involved includes:

• Accounting records
• Human resources documents
• User personal folders

Black Basta is a Ransomware-as-a-Service (RaaS) operation that emerged in early 2022. The group is assessed to have links to Conti. It was reported in early 2025 that the group's internal communications were leaked.

About Jacobs Farm del Cabo

Jacobs Farm del Cabo is a family-owned business founded in 1980 in California, specializing in sustainable and organic agricultural produce. The company operates in the food industry, focusing on the production of fresh fruits and vegetables.

Potential impact and security implications

The alleged exposure of this data may pose risks to the privacy of the organization's employees and its operational integrity. The disclosure of human resources and accounting information could potentially lead to identity theft or targeted phishing attacks against individuals. Given the organization's location in the US, this incident may trigger state-level data protection regulations and associated legal obligations.

Considering the past activities of the Black Basta group, it is possible that the leaked data could be utilized in secondary extortion attempts or within other cybercrime ecosystems. This is a common tactic in modern ransomware attacks, often referred to as double extortion, where attackers not only encrypt data but also threaten to leak it to pressure the victim into paying.

Furthermore, the organization's supply chain partners may also be indirectly affected by this incident. In the agriculture and food production sector, interconnected supply chains mean that a breach in one organization can create ripples of risk throughout the network. Organizations in this sector can take various defensive steps to mitigate such risks, such as implementing robust access controls, maintaining regular offline backups, and conducting thorough audits of third-party connections to ensure that a breach in one link does not compromise the entire chain.