Black Basta ransomware group lists milleredge.com on its leak site

• Ransomware group: Black Basta
• Country: United States
• Sector: Manufacturing
• Announcement date: October 21, 2024

Black Basta claims data breach at Miller Edge

The Black Basta ransomware group has listed the North American manufacturing company Miller Edge on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant volume of sensitive information belonging to the organization.

The group alleges that they gained unauthorized access to the organization's internal systems on October 3, 2024. Following this initial access, the group posted a notice on their leak site on October 21, 2024, officially claiming the breach. The total volume of the data allegedly stolen during this incident is reported to be approximately 600 GB.

Details of the alleged data theft

The contents of the alleged leak are extensive, covering various aspects of the company's operations and administrative functions. Based on the claims made by the Black Basta group, the stolen data is not limited to a single department but spans across multiple sensitive categories. The information reportedly includes a wide array of corporate and personal records that could be highly sensitive.

The specific types of data identified in the group's announcement include:

• Employee personal data
• HR records
• Financial data
• Tax records
• Payroll data
• Accounting data
• Engineering data
• Customer contracts

The presence of such diverse data types, ranging from engineering specifications to financial and payroll records, suggests a broad compromise of the organization's digital environment.

About Miller Edge

Miller Edge is a North American manufacturer specializing in safety accessories designed for motorized doors and automated vehicular gate systems. The company's product portfolio includes various essential safety devices, such as photo eyes and touch-sensitive sensing edges, which are critical for the safe operation of automated entry systems.

Analysis and potential impact of the incident

This alleged breach poses significant secondary risks to both the organization and the individuals involved. The exposure of employee personal information and payroll data can lead to identity theft, while the theft of customer contracts and financial documents may facilitate targeted phishing attacks against the company's business partners and clients. Furthermore, the loss of engineering data could potentially lead to the exposure of the organization's trade secrets, impacting its competitive position in the manufacturing sector.

The Black Basta group is known for employing double-extortion tactics. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage, threatening to release it publicly if a ransom is not paid. This tactic is designed to maximize pressure on the victim by threatening reputational damage and legal consequences. While the group has been assessed to have links to Conti, it is noted that internal communication leaks in early 2025 may have resulted in changes to the group's operational structure.

Because Miller Edge is based in the United States, the nature of the compromised data may trigger various state-level data breach notification laws and other relevant regulatory requirements. Such incidents highlight the ongoing vulnerability of supply chains, as a breach in one manufacturer can have cascading effects on the security and trust within the broader industrial ecosystem. For organizations in the manufacturing sector, maintaining robust security postures is essential to protect intellectual property and sensitive customer information from sophisticated ransomware groups.