booba team
ransomware group · aka Booba · unknown · active since 2026-07-31 (earliest activity tracked by this dashboard; earlier history unknown)
Booba Team is a ransomware and data-extortion group that operates a dedicated leak site where it names victims, with 20 victims posted since this dashboard began tracking on 2026-07-31 and a most recent post on 2026-08-24. Its posting volume is low and irregular, and several listings contain placeholder or incomplete entries (e.g., 'Index of /' and 'STAY TUNED FOR UPCOMING LEAKS'), suggesting inconsistent operational discipline. Named victims span legal services, insurance, telecommunications, franchising, and live-events production across multiple regions, indicating broad but low-volume targeting. Attribution, country of origin, affiliate structure, and ransom demands are not documented in widely available public reporting. No public earnings estimates or CVE associations were identified at the time of writing.
- Operates a dedicated leak site to name and pressure victims (double-extortion model)
- Posts victim listings with minimal supporting detail; some entries are placeholders rather than named organizations
- Low, irregular posting cadence (20 victims across roughly the first four weeks of dashboard tracking)
- Targets organizations across multiple sectors and geographies, including law firms and insurers
- Intrusion, propagation, and exfiltration tradecraft: unknown (no public vendor reporting identified)
- Specific exploited vulnerabilities: unknown (no CVEs publicly linked to this group's operations)
Country-Wide Insurance, Jani-King, Chernyy & Associates, Federis Abogados, Nfinite 9000 S.L., Upstaging, Fonsan, URA Group, Davroc
No public figure.
Leak-site victims22 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Mestechkin Law Group P.C. | · 1d ago | Law Practice Website: www.lawmlg.com Stolen data: 37 GB. |
| Atlas Ocean Voyages | · 1d ago | Travel Arrangements Website: www.atlasoceanvoyages.com Stolen data: 37 GB. |
| Davroc | · 22d ago | Furniture and Home Furnishings Manufacturing Website: www.davroc.co.uk Stolen data: 15 GB. |
| Chernyy & Associates | · 22d ago | Law Practice Website: www.chernyy-law.com Stolen data: 67 GB. |
| Country-Wide Insurance | · 22d ago | Insurance Website: www.cwico.com Stolen data: 92 GB. |
| Federis Abogados | · 22d ago | Law Practice Website: www.federisabogados.com Stolen data: 61 GB. |
| Index of / | · Jul 31, 2026 | — |
| STAY TUNED FOR UPCOMING LEAKS | · Jul 31, 2026 | — |
| Telecommunications | · Jul 31, 2026 | Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewave.io will exhibit at Booth #1146 at APCO 2026 – Association of Public Safety Communications Officials in San Antonio, Texas! They will have what to tell about. Download here http://d77tnb4bkmj3e366msrzllnwsi2t5e54e4yqh7zm7y5hlfwugnwzswad.onion/telewave.com/ |
| Fonsan | · Jul 31, 2026 | Construction Website: www.fonsan.com Stolen data: 23.4 GB |
| Nfinite 9000 S.L. | · Jul 31, 2026 | IT Services and IT Consulting Website: nfinite9000.com Stolen data: 3 GB Piece of data below: File: canvas.png |
| Upstaging | · Jul 31, 2026 | Entertainment Providers Website: www.upstaging.com Stolen data: 10 GB Piece of data below: File: Edwards_Michael.pdf |
| URA Group | · Jul 31, 2026 | Website: uragroup.com Stolen data: 5 GB |
| Jani-King | · Jul 31, 2026 | Facilities Services Website: www.janiking.com Stolen data: 12 GB. |
| Pelli Clarke Pelli Architects | · Jul 31, 2026 | Architecture and Planning Website: www.pcparch.com Stolen data: 45 GB. |
| Zynex | · Jul 31, 2026 | IT Services and IT Consulting Website: www.zynex.ch Stolen data: 1.4 GB |
| Incredible Technologies | · Jul 31, 2026 | Entertainment Providers Website: www.itsgames.com Stolen data: 25 GB |
| Oklahoma Manufacturing Alliance | · Jul 31, 2026 | Business Consulting and Services Website: www.okalliance.com Stolen data: 10 GB. |
| Betz Industries | · Jul 31, 2026 | Industrial Machinery Manufacturing Website: www.betzindustries.com Stolen data: 7 GB. |
| About Us | · Jul 31, 2026 | Dear Valued Partners, We represent the Booba team, specializing in data decryption services. As part of our interaction, we have successfully extracted data from your network prior to system lockdown. We guarantee that, in accordance with our agreement, you will receive a functional decryption tool and have the opportunity to test it before making payment. Note: Any independent attempts to recover files may result in their damage, rendering further assistance impossible. We suggest resolving this matter professionally and confidently finding an optimal solution. Best Regards, The Booba Team |
| Frosty Acres Brands | · Jul 31, 2026 | Food & Beverages Website: www.frostyacres.com Stolen data: 8 GB Piece of data below: File: BL_License.pdf |
| Telewave, Inc. | · Jul 31, 2026 | Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewave.io will exhibit at Booth #1146 at APCO 2026 – Association of Public Safety Communications Officials in San Antonio, Texas! They will have what to tell about. Piece of data below: File: Bob_Saffari_Social_Security_Card.pdf |
In the newsAll →
No articles mention this group yet.