Gfm
bd_24e1f93faf758e07 · schema v1 · pii pii-v1
Full breach record for Gfm →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Black Basta on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
At GFM we pride ourselves on service, innovation and the ongoing relationships we have with our client. We are not simply a facilities management company. By building lasting relationships with over 100 clients GFM have become one of the countries leading FM companies. We offer a full spectrum of FM services, including maintenance, cleaning, catering, security, horticulture, environment and energy. Which can be delivered as a single line or a tailored bundle, but what GFM do best is offer fully integrated bespoke solutions.SITE: www.gfm-uk.com Address : 4 Greengate, Cardale Park, Harrogate, HG3 1GY United BritainALL DATA SIZE: ≈300gb 1. Corporate data 2. NDA, Confidential data 3. Human Resources 4. Personal employees documents and info 5. Clients, customers data & etc...
Source provenance
- Source URL
- https://www.ransomware.live/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 1, 2024
- Raw hash
- 987c525680e0ca864f0ef295c50a711512b93c44349722e6d5aa907ca60f30ab
Reporting entity
- Name
- blackbastanorm: black_basta
Victim entity
- Name
- Gfmnorm: gfm
- Domain
- gfm-uk.com
- Industry
- Professional Services
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· black_basta
- Threat actor
- Black BastaExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.