DisclosureLens
GLOBALMalwareAgriculture & FoodAgricultureRansomwareBlack BastaRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

Duvel.Com | Boulevard.Com

bd_f23b9f7b938064b0 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Mar 6, 2024

To disclose

—

Affected

Not disclosed

Confidence

50%
Full breach record for Duvel.Com | Boulevard.Com →2 incidents on file

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Black Basta on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Agriculture and Food ProductionDiscovered: 2024-03-12
View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

Duvel Moortgat Brewery (Brouwerij Duvel Moortgat) is a Flemish family-controlled brewery founded in 1871 in Antwerp Province, Belgium. Its strong golden pale ale, Duvel, is exported to more than forty countries. Duvel is Brabantian, Ghent and Antwerp dialect for devil, the standard Dutch word being duivel. Other popular beers include Maredsous and Vedett.SITE: www.duvel.com Address : Breendonk-Dorp 58 2870 Puurs-Sint-Amands BelgiumFounded in 1989, Boulevard Brewing Company has grown to become the largest specialty brewer in the Midwest. Our mission is simple: to produce fresh, flavorful beers using the finest ingredients and the best of both old and new brewing techniques. Click the link to learn what drove Boulevard founder John McDonald, and how we got where we are today.SITE: www.boulevard.com Address : 2501 Southwest Boulevard Kansas City, MO 64108 USAALL DATA SIZE: ~1.0tb 1. Accounting 2. HR 3. Home users folders & etc...

Incident timeline — mostly unverified

? — ?

Breach window unknown

Mar 6, 2024

Claim posted

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

—

Compliance clock

Not assessable

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.