Cyber Threat Actor: 8Base Gang

The 8Base Gang, also known as the 8Base ransomware gang, operates as a ransomware-focused threat actor linked to cyberattacks against organizations in the United States. Public reporting associates this group with disruptive ransomware operations targeting entities such as the Atlantic States Marine Fisheries Commission (ASMFC), a U.S.-based organization coordinating fisheries management along the East Coast. The group’s activities emphasize data theft and extortion, leveraging stolen information to pressure victims into paying ransoms.

The gang’s targeting centers on sectors with operational criticality, as evidenced by the April 2024 attack on ASMFC, which disrupted email communications and forced the commission to adopt temporary workarounds. Their strategic objective appears financially motivated, focusing on exfiltrating sensitive data—including invoices, contracts, and organizational documents—to coerce payments. While the ASMFC incident highlights a focus on public-sector-adjacent environmental management bodies, broader sectoral or geographic patterns remain unconfirmed in available sources.

8Base employs ransomware paired with data exfiltration, publicly claiming theft of victim data to amplify extortion pressure. The ASMFC attack exemplifies their operational impact: stolen data was weaponized to threaten disclosure, while ransomware deployment crippled email systems, hindering day-to-day operations. The group’s reliance on double extortion—encrypting systems while threatening to leak stolen data—aligns with common criminal ransomware practices. No specific malware families, initial access vectors, or tooling details are publicly documented for this actor beyond their use of ransomware payloads. The ASMFC incident remains their most prominently reported operation, with the full impact on data integrity and organizational recovery still under assessment at the time of reporting.