Skip to content
Leak site of booba project, captured by ThreatCluster

booba project

Active

25 tracked victims

About

Written by ThreatCluster from 2 stories

Booba Project is a ransomware group that operates with an extortion model, threatening to release stolen data unless negotiations occur, as evidenced by leak-site postings and data-exfiltration claims from victims such as GOTTHELF (about 2 GB) and Tulare Western High School. The victims cover multiple sectors, with Professional Services, Technology, Business Services, Manufacturing, and Hospitality most often affected, and they have been reported in the US, ES, RU, MX, and MD. Recent reporting shows a pattern of data exfiltration followed by public leak-site announcements to pressure negotiations; for example, on 2026-09-22 Booba Project listed GOTTHELF and Tulare Western High School on its leak site, with GOTTHELF reportedly holding about 2 GB of stolen data and Tulare Western allegedly suffering a larger breach. These incidences indicate a focus on healthcare and educational victims among a broader set of targets.

Sectors: Healthcare, Government & Defense, Education · Countries: US, CA, RU

Recent victims

View all →
VictimSectorCountryPostedStatus
LifeFoneHealthcareUSOct 29, 2026
National Association of Credit ManagementFinancial ServicesUSOct 29, 2026
California School Boards AssociationEducationUSOct 29, 2026
South Weber CityGovernment & DefenseUSOct 29, 2026
Programs for Parents, Inc.EducationUSOct 29, 2026
Circleville Police DepartmentGovernment & DefenseUSOct 29, 2026
Terrebonne Parish GovernmentGovernment & DefenseUSOct 29, 2026
RCOA- Regent Christian Online AcademyEducationCAOct 27, 2026
Kerckstede vzwOtherBEOct 27, 2026
BASS Medical GroupHealthcareUSOct 27, 2026
Hudson River MuseumEducationUSOct 27, 2026
Horizon Eye Specialists & LASIK CenterHealthcareUSOct 27, 2026
Aesthetic Specialty CentreHealthcarePKOct 27, 2026
City of Big SpringGovernment & DefenseUSOct 27, 2026
KING FAMILY MEDICALHealthcareUSOct 27, 2026
Charter Township of CommerceGovernment & DefenseUSOct 27, 2026
Regent Christian Online AcademyEducationCAOct 27, 2026
Research Foundation of The City University of New YorkEducationUSOct 20, 2026
Chicago Vein InstituteHealthcareUSOct 20, 2026
Pearland PediatricsHealthcareUSOct 20, 2026
City of Mt. Angel, OregonGovernment & DefenseUSOct 20, 2026
City Hall - Everett, MAGovernment & DefenseUSOct 20, 2026
COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PAHealthcareUSOct 20, 2026
MorseLife Health System, Inc.HealthcareUSOct 4, 2026
Raleigh Family MedicineHealthcareUSOct 2, 2026

Found by ThreatCluster

16 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Booba Chat
Oct 16, 2026
chernyy-law.com
chernyy-law.com · 23 files
Sep 14, 2026
davroc.co.uk
davroc.co.uk · 14 files
Sep 14, 2026
cwico.com
cwico.com
Sep 14, 2026
federisabogados.com
federisabogados.com · 52.24 GiB · 27 files
Sep 14, 2026
betzindustries.com
betzindustries.com · 5.6 GiB · 7 files
Sep 2, 2026
itsgames.com
itsgames.com · 14 files
Sep 2, 2026
nfinite9000.com
nfinite9000.com · 1.1 GiB and 613.8 MiB · 2 files
Sep 2, 2026
janiking.com
janiking.com · 10.87 GiB · 8 files
Sep 2, 2026
pcparch.com
pcparch.com · 40 files
Sep 2, 2026
telewave.com
telewave.com · 16 files
Sep 2, 2026
uragroup.com
uragroup.com · 4 files
Sep 2, 2026
okalliance.com
okalliance.com · 6.58 GiB · 4 files
Sep 2, 2026
upstaging.com
upstaging.com · 9.76 GiB · 9 files
Sep 2, 2026
frostyacres.com
frostyacres.com · 7.493 GiB · 4 files
Sep 2, 2026
zynex.com
zynex.com · 1.2 GiB · 1 files
Sep 2, 2026

All ransomware groups · Dark web intelligence