logo

Southern Water takes the fifth over alleged $750K Black Basta ransom offer

ID: f385f611-8960-57bc-8f8c-27116e6515e0

STIX ID: report--f385f611-8960-57bc-8f8c-27116e6515e0

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2025-02-25

Date Updated: 2026-04-26

Author: Connor Jones

...
...

The article summarizes leaked Black Basta chat logs relating to a January 2024 ransomware attack on Southern Water, reporting a $3.5M ransom demand, an alleged $750,000 victim offer, and roughly 750 GB of data exfiltrated; the leaks also expose negotiation behavior, affiliate revenue splits, social-engineering entry points, and operational TTPs, though some AI-extracted translations were reportedly unreliable.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.