About
Written by ThreatCluster from 2 storiesBooba Project is a ransomware group that operates with an extortion model, threatening to release stolen data unless negotiations occur, as evidenced by leak-site postings and data-exfiltration claims from victims such as GOTTHELF (about 2 GB) and Tulare Western High School. The victims cover multiple sectors, with Professional Services, Technology, Business Services, Manufacturing, and Hospitality most often affected, and they have been reported in the US, ES, RU, MX, and MD. Recent reporting shows a pattern of data exfiltration followed by public leak-site announcements to pressure negotiations; for example, on 2026-09-22 Booba Project listed GOTTHELF and Tulare Western High School on its leak site, with GOTTHELF reportedly holding about 2 GB of stolen data and Tulare Western allegedly suffering a larger breach. These incidences indicate a focus on healthcare and educational victims among a broader set of targets.
Sectors: Healthcare, Government & Defense, Professional Services · Countries: US, ES, RU
Recent victims
View all →| Victim | Sector | Country | Data | Posted | Status |
|---|---|---|---|---|---|
| Research Foundation of The City University of New York | Education | US | — | Oct 20, 2026 | |
| Chicago Vein Institute | Healthcare | US | — | Oct 20, 2026 | |
| Pearland Pediatrics | Healthcare | US | — | Oct 20, 2026 | |
| City of Mt. Angel, Oregon | Government & Defense | US | — | Oct 20, 2026 | |
| City Hall - Everett, MA | Government & Defense | US | — | Oct 20, 2026 | |
| COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA | Healthcare | US | — | Oct 20, 2026 | |
| MorseLife Health System, Inc. | Healthcare | US | — | Oct 4, 2026 | |
| Raleigh Family Medicine | Healthcare | US | — | Oct 2, 2026 | |
| EdgeEndo® USA | Healthcare | US | — | Oct 2, 2026 | |
| Soni Medical Centre | Healthcare | CA | — | Oct 2, 2026 | |
| University of Illinois Chicago | Education | US | — | Oct 2, 2026 | |
| FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" | Government & Defense | BR | Stolen data: 26 GB. | Oct 1, 2026 | listed |
| ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C | Healthcare | US | 70 GB | Oct 1, 2026 | |
| COSEF - Consorzio di Sviluppo Economico del Friuli | Other | IT | — | Sep 23, 2026 | |
| The Merrimack County | Government & Defense | US | — | Sep 23, 2026 | |
| Smart Eye Care | Healthcare | — | Sep 23, 2026 | ||
| Washington County | Government & Defense | US | — | Sep 23, 2026 | |
| Tulare Western High School | Education | US | — | Sep 22, 2026 | |
| GOTTHELF | Not Found | MD | — | Sep 22, 2026 | |
| Mestechkin Law Group P.C. | Professional Services | US | 37 GB | Sep 14, 2026 | listed |
| Atlas Ocean Voyages | Hospitality | US | 37 GB | Aug 24, 2026 | listed |
| Davroc | Technology | GB | — | Aug 24, 2026 | |
| Chernyy & Associates | Professional Services | RU | — | Aug 24, 2026 | |
| Country-Wide Insurance | Financial Services | US | — | Aug 24, 2026 | |
| Federis Abogados | Professional Services | MX | — | Aug 24, 2026 |
Found by ThreatCluster
16 total from our crawlListed on this group's leak site and not present in the aggregated feeds.