Fortiss LLC listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: United States
• Sector: Professional Services
• Announcement date: November 29, 2023

8base claims data compromise of Fortiss LLC

The threat actor known as 8base has listed Fortiss LLC on its leak site, alleging that the company's data has been compromised. According to the announcement made on November 29, 2023, the group claims to have obtained various files from the organization's servers. This claim follows an alleged attack date of November 28, 2023.

The group identified in this incident is 8base, a known double-extortion entity that has been active since 2022. In a double-extortion scheme, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish the stolen data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information.

Ransomware leak sites serve as a platform for these groups to host lists of victims and, in many cases, samples of stolen data to increase the psychological pressure on the target. While law enforcement and security researchers often attempt to disrupt these groups through infrastructure interventions, the threat of data publication remains a significant risk for many organizations.

Details of the claimed data breach

The leak announcement provided by the group includes a list of various file types that were purportedly obtained from the company's servers. The specific categories of data mentioned in the listing include a wide range of sensitive business and personal documentation.

The following types of data are claimed to be compromised:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Personal files

No specific information was provided regarding the total size of the data stolen or the specific number of files involved. Additionally, there was no mention of a specific ransom demand in the announcement.

About Fortiss LLC

Fortiss LLC is a firm providing accounting, management consulting, recruiting, and human resources solutions for casinos and card rooms in California. Founded in 2005, the company focuses on helping gaming industry businesses improve their operational efficiency and profitability.

Implications and potential risks

Given the nature of Fortiss LLC's business and the types of data involved, the breach may pose secondary risks such as identity theft or targeted phishing attacks against employees and clients. The presence of employment contracts, personal data, and accounting documents suggests that both corporate and individual privacy could be impacted.

As the company is based in California, a potential data breach could trigger legal processes under state-level privacy laws and regulations. Organizations operating in highly regulated sectors or handling sensitive client information must be prepared for the legal and regulatory scrutiny that follows a data exposure.

The double-extortion tactic employed by 8base indicates an intent to pressure the organization through the threat of data publication. Despite interventions against the group's infrastructure in early 2025, such leaks may still have significant implications for the company's commercial reputation and operational continuity. For organizations in the professional services sector, maintaining robust data protection measures and incident response plans is essential to mitigate the impact of such targeted extortion attempts.