Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Inactive · #16 by victimsRansomware group

8BASE

As of Oct 19, 2026, 8BASE has listed 451 confirmed victims on its leak site since Jan 9, 2023, 1.4% of all victims tracked by Brandefense. Its most targeted country is United States (34.6% of its victims) and its most targeted sector is Consulting.

The 8base Ransomware group made its first appearance in early March 2022, remaining somewhat quiet after the attacks. This group operates like other ransomware actors, engaging in double extortion. However, in mid-May and June 2023, the ransomware operation saw a spike in activity against organizations from various sectors, listing 131 organizations in just 3 months. The 8base data leak site was created and made available in March 2023, claiming honesty and simplicity in its discourse. VMware published a report on 8base, drawing some similarities with the ransomware group `RansomHouse`…

Is My Company Listed?Follow 8BASERequest IOC FeedTTPs, CVEs and malware →

Follow and IOC feeds are part of the Brandefense platform.

Confirmed Victims
451
Rank By Victims
#16
Last Leak-Site Post
Feb 1, 2025
Top Country
United States
Top Sector
Consulting

Victims Posted Per Month.

8BASE confirmed victims per month
MonthConfirmed victims
January 20237
February 20235
March 20234
April 20232
May 202367
June 202336
July 202329
August 202323
September 202310
October 202312
November 202329
December 202318
January 202436
February 202433
March 202422
April 202432
May 202423
June 202411
July 20240
August 20240
September 202413
October 20240
November 20248
December 20243
January 202524
February 20254
March 20250
April 20250
May 20250
June 20250
July 20250
August 20250
September 20250
October 20250
November 20250
December 20250
January 20260
February 20260
March 20260
April 20260
May 20260
June 20260
July 20260
August 20260
September 20260
October 2026 (month in progress)0
Updated continuously · figures as of Oct 19, 2026

Latest 8BASE Victims.

Search all 451 →
Latest confirmed leak-site victims claimed by 8BASE
VictimCountryIndustryData claimedPosted
St. Nicholas SchoolBRBrazilUnknownNot stated
HéronBEBelgiumUnknownNot stated
Tan Teck Seng Electric (Co) Pte Ltd
tts.sg
SGSingaporeUnknownNot stated
High Learn Ltd
highlearn.co.uk
GBUnited KingdomUnknownNot stated
Southeast SupplyUnknownUnknownNot stated
Cabinet JEAN LOUVEL SAOUDI
jean-louvel.fr
FRFranceUnknownNot stated

How They Operate.

8BASE's threat actor profile lists 34 ATT&CK techniques, 23 malware and tools, with its targets and related actors.

TTPs, CVEs and malware →

Who 8BASE Targets.

Sectors

  1. Consulting388.4%
  2. Manufacturing296.4%
  3. Retail235.1%
  4. Technology153.3%
  5. Construction122.7%

Countries

  1. USUnited States15634.6%
  2. FRFrance357.8%
  3. ITItaly276.0%
  4. GBUnited Kingdom265.8%
  5. DEGermany255.5%
Shares are of this group's confirmed victims.

History.


  1. First confirmed victim listed on its leak site

  2. Busiest month on record: 67 confirmed victims

  3. First seen in Brandefense data

  4. Most recent leak-site post

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.