Law enforcement agencies raided two suspected members of the Black Basta ransomware group and announced they are actively seeking the group’s leader(s). Black Basta has been one of the most prolific ransomware groups since its emergence in 2022, responsible for high-profile attacks including Ascension Health (2024), CISA (2023), ABB, Capita, and many others — earning estimated ransoms exceeding $100 million. The group uses double extortion (encrypting data and threatening to publish stolen files). Black Basta experienced internal turmoil in early 2025 when chat logs between leadership were leaked online, revealing the group’s operational structure, victims, and financial flows. The law enforcement action in 2026 represents continued pressure on ransomware infrastructure.