8BASE
Data as of August 16, 2026.
Credential exposure before the attack
10.4% of 8BASE victims whose domain we can identify (46 of 444) had employee credentials leak in the 12 months before 8BASE named them as a victim.
We don't know whether any of these credentials were how 8BASE gained initial access.
What industries 8BASE targets
Sector identified for 235 of 444 victims.
| Manufacturing | 65 | |
| Financial Services | 30 | |
| Construction | 29 | |
| Healthcare | 24 | |
| Logistics | 15 | |
| Education | 13 | |
| Legal | 10 | |
| Technology | 8 |
Where the victims are located
Country identified for 192 of 444 victims.
| Brazil | 23 | |
| France | 23 | |
| Germany | 17 | |
| United Kingdom | 14 | |
| Italy | 12 | |
| Australia | 11 | |
| Canada | 9 | |
| Switzerland | 9 |
Most recent 8BASE victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Héron heron.be | Government | Belgium | Feb 3, 2025 |
| High Learn highlearn.co.uk | Not identified | United Kingdom | Feb 3, 2025 |
| Southeast Supply southeastsupplytn.com | Not identified | Not identified | Feb 3, 2025 |
| St. Nicholas School stnicholas.com.br | Education | Brazil | Feb 3, 2025 |
| Tan Teck Seng Electric tts.sg | Not identified | Singapore | Feb 3, 2025 |
| Fournitures Industrielles de l\'Ouest fio.fr | Manufacturing | France | Jan 24, 2025 |
| Delta Dental of Washington deltadentalwa.com | Healthcare | Not identified | Jan 17, 2025 |
| Netform net-inform.de | Technology | Germany | Jan 17, 2025 |
| Bring Solutions bringsolutions.com.br | Not identified | Brazil | Jan 15, 2025 |
| Moraviakov webnode.cz | Manufacturing | Czech Republic | Jan 15, 2025 |
| Gebäudereinigungsakademie gebaeudereinigungsakademie.at | Education | Austria | Jan 15, 2025 |
| Wynnewood High School k12.ok.us | Education | United States | Jan 15, 2025 |
| Ascom ascom-italy.it | Manufacturing | Italy | Jan 8, 2025 |
| Bergström Wines bergstromwines.com | Not identified | Not identified | Jan 8, 2025 |
| CED Solutions Computer IT Training Centers cedsolutions.com | Technology | Not identified | Jan 8, 2025 |
| Hectare hectare.fr | Agriculture | France | Jan 8, 2025 |
| IRO Paris iroparis.com | Not identified | Not identified | Jan 8, 2025 |
| Lake Shore Public Schools lakeshoreschools.org | Education | Not identified | Jan 8, 2025 |
| Omni Travel omnitravel.com | Not identified | Not identified | Jan 8, 2025 |
| Sport Boutique sport-boutique.com | Hospitality | France | Jan 8, 2025 |
Showing the 20 most recent of 444. Browse recent data breaches for more.
8BASE leak sites
Addresses we've seen 8BASE publish victims from. Any .onion address needs the Tor Browser.
basemmnnqwxevlymli5bs36o5ynti55xojzvn246spahniugwkff2pad.onionxb6q2aggycmlcrjtbjendcnnwpmmwbosqaugxsqb4nx6cmod3emy7sad.onionxfycpauc22t5jsmfjcaz2oydrrrfy75zuk6chr32664bsscq4fgyaaqd.onionpixeldrain.comgofile.ioalphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onionakiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onionjbmk7h6xlkedn2gg5yi76zca6y3jgdlp5wchlsrd7735tlnrmmvqe5ad.onionransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onionstniiomyjliimcgkvdszvgen3eaaoz55hreqqx6o77yvmpwt7gklffqd.onionkbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onionlockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onioncactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onioncactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
8BASE questions
Is 8BASE still active?
Not for over a year. The last victim we recorded was February 3, 2025. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has 8BASE claimed?
8BASE has named 444 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did 8BASE first appear?
The first victim we recorded for 8BASE was posted on January 12, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does 8BASE target?
Manufacturing accounts for the most victims we can classify, with 65. Financial Services follows at 30. We could identify a sector for 235 of 444 victims, so treat this as the shape of the targeting rather than a full census.
Has 8BASE already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.