ids-michigan.com Listed by blackbasta Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 2, 2024, the architecture and engineering firm ids-michigan.com was listed by the blackbasta ransomware group as a victim of a data breach. Public reporting indicates that internal files were exfiltrated during a ransomware attack, with the group claiming a data volume of roughly 550 gigabytes or more. The number of people affected remains unknown, and independent confirmation of the full scope is limited.

This matters because the firm handles project files, technical drawings, and corporate records that can include sensitive business and personal information. When such material is claimed to have been taken, those whose details appear in it face ongoing risks of misuse even if the precise contents stay unconfirmed.

Inside the incident

According to the available record, ids-michigan.com appeared on blackbasta’s leak site on April 2, 2024. The listing describes the firm as a fully integrated practice specializing in architecture, engineering, interiors, technology, energy and sustainability, with an address at 1441 W Long Lake Rd, Suite 200, Troy, MI 48098 USA. The group claims that internal files were exfiltrated and that the total data size is approximately 550 gigabytes or more, broken down as projects, CAD and drawings, users, corporate data and similar material.

No further public detail has been provided on the exact date the intrusion began, how access was obtained, whether encryption was also deployed, or whether any ransom demand was met. The number of individuals whose information may be involved is listed as unknown. All specifics about the volume and categories of data therefore rest on the group’s own claim rather than independent verification.

Inside blackbasta

Blackbasta is a ransomware group that has operated since early 2022. It is known for double-extortion tactics: encrypting systems while also stealing data and threatening to publish it if payment is not made. The group typically gains initial access through phishing, compromised credentials or exploitation of remote-access tools, then moves laterally before deploying its ransomware and exfiltrating files. It has listed victims across manufacturing, professional services, healthcare and other sectors, often posting sample files or full archives on its leak site to pressure payment.

In this case the group claims to have taken roughly 550 gigabytes of material from ids-michigan.com. That claim has not been independently confirmed in the public record, and no additional statements from blackbasta about this specific victim beyond the listing itself have been reported.

Who is ids-michigan.com?

ids-michigan.com is the online presence of IDS, a Michigan-based firm that describes itself as fully integrated across architecture, engineering, interiors, technology, energy and sustainability. Its office is listed at 1441 W Long Lake Rd, Suite 200, Troy, MI 48098. Firms of this type design and manage building projects, produce technical drawings, coordinate with clients and contractors, and maintain corporate records that support day-to-day operations.

A breach at such an organization is consequential because project files and CAD drawings often contain proprietary designs, site details and client specifications. Corporate and user data can include employee records, contact lists and internal communications. Exposure of these materials can affect not only the firm’s competitive position but also the privacy of staff, clients and partners whose information appears in the files.

The information in question

The blackbasta listing states that internal files were exfiltrated and names the following categories: projects, CAD and drawings, users, corporate data and similar material, totaling roughly 550 gigabytes or more. No independent inventory of the files has been published, and the exact contents remain unconfirmed.

Organizations of this kind typically hold architectural plans, engineering calculations, client contracts, employee directories, email archives and financial records. Because the public record does not verify which of these items, if any, were actually taken, it is not possible to state with certainty what personal or proprietary data is involved. The only confirmed public description is the group’s own claim.

The real-world impact

For individuals whose names, contact details or other identifiers appear in the claimed files, the primary risks include targeted phishing, identity fraud and social-engineering attempts that reference project or workplace information. Corporate data can also be used to craft more convincing scams against clients or partners. Because the number of people affected is unknown, the scale of these risks cannot yet be measured.

For the firm itself, the consequences can include operational disruption, loss of client confidence, potential regulatory scrutiny and the cost of forensic investigation and remediation. Even if systems are restored, the continued circulation of stolen files on criminal forums can prolong exposure for years. None of these outcomes has been publicly quantified for this incident.

If your data was in this claimed breach

If you have a past or present connection to ids-michigan.com—as an employee, client or contractor—treat the possibility of exposure seriously. Change passwords on any accounts that may have been linked to the firm, enable multi-factor authentication where available, and monitor financial and email accounts for unusual activity. Be cautious of unsolicited messages that reference projects or internal details.

You can also run a free exposure scan of your email address to check whether it has already appeared in known breach data sets. That step provides an early warning if your information has begun to circulate, allowing you to take further protective measures promptly.

AICompiled with AI assistance from public sources and published under our editorial standards.