City of Mt. Angel, Oregon targeted by Booba Project ransomware group

• Ransomware group: Booba Project
• Country: United States
• Sector: Government & Defense
• Announcement date: October 20, 2026

Booba Project claims data breach at City of Mt. Angel, Oregon

The threat actor known as Booba Project has listed the City of Mt. Angel, Oregon, on its leak site, claiming to have exfiltrated a significant amount of data from the municipality. According to the announcement made on October 20, 2026, the group alleges that they have successfully breached the institution's systems and obtained sensitive information.

Details of the alleged attack

The incident was announced by the Booba Project on October 20, 2026, the same date the group claims the attack took place. The threat actor asserts that they have exfiltrated 18 GB of data from the systems belonging to the City of Mt. Angel. At this time, public information regarding the specific operations and background of the Booba Project group remains limited, making it difficult to ascertain their full methodology or long-term objectives.

Information regarding the leaked data

While the group has claimed a specific volume of stolen information, the listing does not provide specific details regarding the nature of the files. The listing names no specific data types or categories of information that were allegedly compromised.

No screenshots or detailed descriptions have been provided by the group to illustrate the contents of the alleged leak. Furthermore, the group has not issued a ransom demand or provided any specific information regarding the files included in the 18 GB volume.

About the City of Mt. Angel, Oregon

The City of Mt. Angel, Oregon, is a local municipal government. The city administration is responsible for providing essential public services and administrative support to its local residents.

Impact assessment and industry implications

The alleged leak poses several risks to the institution. Such a breach may lead to significant disruptions in the city's administrative processes and could result in potential privacy breaches. When government entities are targeted in this manner, it creates a risk of exposing the personal information of citizens to unauthorized parties.

Because the institution operates within the United States, this incident may trigger legal proceedings under relevant state laws and federal data protection regulations. The potential consequences of such a breach extend beyond the immediate administrative impact; the leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing attacks in the future.

If the Booba Project employs double extortion tactics, it could create additional pressure on the institution's operational continuity. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten the victim with its public release. This method increases the pressure on organizations to comply with ransom demands to prevent the disclosure of private data.

For organizations in the government and defense sector, such incidents highlight the ongoing necessity of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized exfiltration. Protecting citizen data remains a primary concern for municipal governments facing increasingly sophisticated threat actors.