Skip to content
NewA calmer, faster ZeroHour

booba team

ransomware group · aka Booba Team · unknown · active since 2026-07

  • Victims · 7d16+10 vs prior week
  • Victims · 30d23 
  • Victims · 90d41 
  • All-time (tracked)57since 2026-07-31
  • Last post10-29 15:31UTC
  • Estimated earnings—public reporting
Profile · grok-4.7 · updated Summaries by Vani AI

Booba Team is a data-extortion group observed through leak-site posts tracked by this dashboard. Widely cited vendor, law-enforcement, and blockchain reporting was not found to establish origin, malware, affiliate structure, or ransom revenue, so those fields are unknown rather than inferred. Dashboard tracking shows listings beginning 2026-07-31, with 35 posts over the following 90 days (15 in 30 days, 1 in 7 days) and a last post on 2026-10-04. Recent names are concentrated in healthcare, with additional claims against education, local government, and other organizations; those names are leak-site claims and are not independently confirmed compromises. No CVE has been publicly linked to Booba Team intrusions in the sources reviewed.

Tactics & tooling
  • Publishes named organizations on a leak site to pressure payment (dashboard observation only)
  • Initial access method unknown
  • Malware family and intrustion tooling unknown
  • No publicly reported exploit, CVE, or intrusion procedure identified
  • Negotiation process and payment rails unknown
Targeted sectors
healthcareeducationlocal governmentprofessional services
Notable public victims

MorseLife Health System, Inc., Raleigh Family Medicine, EdgeEndo® USA, Soni Medical Centre, University of Illinois Chicago, FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel", ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C, COSEF - Consorzio di Sviluppo Economico del Friuli, The Merrimack County, Smart Eye Care

Estimated earnings

No public figure.

Leak-site victims

57 posts · newest first
VictimDiscoveredDetails
South Weber City · 3d agoGovernment Administration Website: www.southwebercity.gov Stolen data: 295 GB.
Programs for Parents, Inc. · 3d agoNon-profit Organizations Website: www.programsforparents.org Stolen data: 95 GB.
Circleville Police Department · 3d agoGovernment Administration Website: www.circlevillepolice.com Stolen data: 15 GB.
Terrebonne Parish Government · 3d agoGovernment Relations Services Website: www.tpcg.org Stolen data: 105 GB.
LifeFone · 3d agoMedical Equipment Manufacturing Website: www.lifefone.com Stolen data: Less than 1 GB.
National Association of Credit Management · 3d agoFinancial Services Website: www.nacm.org Stolen data: 38 GB.
California School Boards Association · 3d agoEducation Management Website: www.csba.org Stolen data: 80 GB.
Horizon Eye Specialists & LASIK Center · 5d agoMedical Practices Website: www.horizonlaservision.com Stolen data: 121 GB.
Aesthetic Specialty Centre · 5d agoMedical Practices Website: www.asc-psd.com Stolen data: 22GB.
City of Big Spring · 5d agoGovernment Administration Website: www.mybigspring.com Stolen data: 151 GB.
KING FAMILY MEDICAL · 5d agoHospitals and Health Care Website: www.kingfamilymedical.net Stolen data: 67 GB.
Charter Township of Commerce · 5d agoGovernment Administration Website: www.commercetwp.com Stolen data: 155 GB.
RCOA- Regent Christian Online Academy · 5d agoHospitals and Health Care Website: www.rcoa.ca Stolen data: 1 GB.
Kerckstede vzw · 5d agoHospitals and Health Care Website: www.althus.be Stolen data: 10 GB.
BASS Medical Group · 5d agoMedical Practices Website: www.bassmedicalgroup.com Stolen data: 100 GB.
Hudson River Museum · 5d agoMuseums, Historical Sites, and Zoos Website: www.hrm.org Stolen data: 115 GB.
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA · 12d agoMedical Practices Website: www.coastalcarolinapsych.com Stolen data: 10 GB.
Research Foundation of The City University of New York · 12d agoEducation Administration Programs Website: www.rfcuny.org Stolen data: 295 GB.
Chicago Vein Institute · 12d agoMedical Practices Website: www.chicagoveininstitute.com Stolen data: 3 GB.
Pearland Pediatrics · 12d agoHospitals and Health Care Website: www.pearlandpediatrics.com Stolen data: 35 GB.
City of Mt. Angel, Oregon · 12d agoGovernment Administration Website: www.ci.mt-angel.or.us Stolen data: 18 GB.
City Hall - Everett, MA · 12d agoGovernment Administration Website: ci.everett.ma.us Stolen data: 15 GB.
MorseLife Health System, Inc. · 28d agoHospitals and Health Care Website: www.morselife.org Stolen data: 344 GB.
Raleigh Family Medicine · Oct 2, 2026Hospitals and Health Care Website: www.rfppa.com Stolen data: 1 GB.
EdgeEndo® USA · Oct 2, 2026Medical Device Website: www.edgeendo.com Stolen data: 103 GB.
Soni Medical Centre · Oct 2, 2026IT Services and IT Consulting Website: www.lakewoodmedical.ca Stolen data: 5.5 GB.
University of Illinois Chicago · Oct 2, 2026Higher Education Website: www.uic.edu Stolen data: 344 GB.
FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" · Oct 1, 2026Government Relations Services Website: funap.sp.gov.br Stolen data: 26 GB.
ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C · Oct 1, 2026Medical Practices Website: www.gastrocny.com Stolen data: 70 GB.
COSEF - Consorzio di Sviluppo Economico del Friuli · Sep 23, 2026Facilities Services Website: cosef.fvg.it Stolen data: 200 GB.
The Merrimack County · Sep 23, 2026Government Administration Website: www.merrimackcounty.net Stolen data: 3 GB.
Smart Eye Care · Sep 23, 2026Optometrists Website: www.smarteyecare.com Stolen data: 7 GB.
Washington County · Sep 23, 2026Government Administration Website: washingtoncountymaine.com Stolen data: 2 GB.
Tulare Western High School · Sep 22, 2026Education Administration Programs Website: www.tjuhsd.org Stolen data: 35 GB.
GOTTHELF · Sep 22, 2026Healthcare Website: www.gotthelfmd.com Stolen data: 2 GB.
Mestechkin Law Group P.C. · Sep 14, 2026Law Practice Website: www.lawmlg.com Stolen data: 37 GB.
Atlas Ocean Voyages · Sep 14, 2026Travel Arrangements Website: www.atlasoceanvoyages.com Stolen data: 37 GB.
Davroc · Aug 24, 2026Furniture and Home Furnishings Manufacturing Website: www.davroc.co.uk Stolen data: 15 GB.
Chernyy & Associates · Aug 24, 2026Law Practice Website: www.chernyy-law.com Stolen data: 67 GB.
Country-Wide Insurance · Aug 24, 2026Insurance Website: www.cwico.com Stolen data: 92 GB.
Federis Abogados · Aug 24, 2026Law Practice Website: www.federisabogados.com Stolen data: 61 GB.
Index of / · Jul 31, 2026—
STAY TUNED FOR UPCOMING LEAKS · Jul 31, 2026—
Telecommunications · Jul 31, 2026Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewave.io will exhibit at Booth #1146 at APCO 2026 – Association of Public Safety Communications Officials in San Antonio, Texas! They will have what to tell about. Download here http://d77tnb4bkmj3e366msrzllnwsi2t5e54e4yqh7zm7y5hlfwugnwzswad.onion/telewave.com/
Fonsan · Jul 31, 2026Construction Website: www.fonsan.com Stolen data: 23.4 GB
Nfinite 9000 S.L. · Jul 31, 2026IT Services and IT Consulting Website: nfinite9000.com Stolen data: 3 GB Piece of data below: File: canvas.png
Upstaging · Jul 31, 2026Entertainment Providers Website: www.upstaging.com Stolen data: 10 GB Piece of data below: File: Edwards_Michael.pdf
URA Group · Jul 31, 2026Website: uragroup.com Stolen data: 5 GB
Jani-King · Jul 31, 2026Facilities Services Website: www.janiking.com Stolen data: 12 GB.
Pelli Clarke Pelli Architects · Jul 31, 2026Architecture and Planning Website: www.pcparch.com Stolen data: 45 GB.

In the news

All

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .