jonti-craft.com Listed by blackbasta Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On October 18, 2024, the ransomware group blackbasta listed jonti-craft.com on its leak site, claiming to have exfiltrated internal files from the company in a ransomware attack. Public detail on the incident remains limited: the number of people affected is unknown, and independent confirmation of the breach has not been reported. The listing itself is a claim by the group rather than verified disclosure.

Jonti-Craft is a family-owned manufacturer of children’s furniture used in classrooms, daycares, waiting rooms and similar settings. Any compromise of its systems raises questions about the security of operational and personal records held by a business that serves institutions caring for children and families.

Inside the incident

According to the blackbasta listing dated October 18, 2024, the group asserts that it conducted a ransomware attack against jonti-craft.com and removed internal files. The group further claims the volume of data taken is approximately 700 GB. No public information has confirmed the date the intrusion began, how access was obtained, whether encryption was deployed on the company’s systems, or whether any ransom demand was paid or refused. The scale of impact on individuals is listed as unknown. Beyond the group’s own statements on its leak site, further technical or forensic detail has not been released.

The group behind it: blackbasta

Blackbasta is a ransomware operation that has been active in public reporting since 2022. Like many contemporary ransomware crews, it typically employs a double-extortion model: encrypting systems while also stealing data and threatening to publish it if payment is not made. The group has previously listed a range of corporate and institutional victims across manufacturing, professional services and other sectors. Its leak site serves as both a pressure mechanism and a public claim of responsibility. In this case, the appearance of jonti-craft.com on that site constitutes blackbasta’s assertion that it holds the company’s data; it does not by itself constitute independent verification of the intrusion or of the precise contents of any archive.

About jonti-craft.com

Jonti-Craft is a family-owned company based in Wabasso, Minnesota, that designs and manufactures furniture intended for children. Its products are commonly found in early-childhood classrooms, daycare centers, waiting rooms and other environments where young people spend time. Businesses of this type routinely maintain customer and partner contact records, order and shipping information, employee and payroll files, engineering drawings, and internal departmental documents. Because the company supplies institutions that serve children, any exposure of its records can affect not only its own staff and suppliers but also the schools, care providers and families that rely on its products.

The information in question

The blackbasta listing claims that the exfiltrated material consists of internal files totaling roughly 700 GB and includes categories described as home-users data, financial data and payroll, personal information, human-resources records, engineering files, and other departmental material. These descriptions come solely from the group’s own post; they have not been independently confirmed. Organisations that manufacture and sell specialised furniture typically hold employee personal data, payroll and tax records, customer and dealer contact details, design and production documents, and financial ledgers. Whether any of those categories were in fact taken, and in what volume or sensitivity, remains unconfirmed outside the group’s claim.

Why it matters

If the claimed data are authentic, individuals whose details appear in payroll, human-resources or personal files could face risks of identity misuse, targeted phishing or financial fraud. Employees and contractors might see sensitive employment or compensation information circulate. Engineering and departmental files could expose proprietary designs or operational practices that competitors or other actors might exploit. For the company itself, the listing creates reputational pressure, potential regulatory scrutiny and the practical cost of investigating and remediating any confirmed intrusion. Because the furniture is used in settings involving children, even limited exposure of institutional customer lists can raise secondary concerns for schools and care providers who must assess whether their own contact or order data were involved. At present these remain potential consequences; the exact contents and the number of people affected are still unknown.

What to do if you're exposed

Anyone who has worked for, supplied, or done business with Jonti-Craft and is concerned about possible exposure can take a few measured steps while waiting for further official information:

• Monitor bank, credit-card and payroll accounts for unfamiliar activity and enable transaction alerts where available.
• Place a free fraud alert or credit freeze with the major credit bureaus if financial or identity data may be involved.
• Treat unexpected emails, calls or messages that reference the company or request personal details with caution; verify them through known official channels.
• Change passwords on any accounts that reused credentials associated with work or supplier portals, and enable multi-factor authentication.
• Keep records of any suspicious contacts and report confirmed identity theft to the relevant consumer-protection authorities.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Official statements from the company, if and when they are issued, will provide the most reliable guidance on the scope of any confirmed compromise.

AICompiled with AI assistance from public sources and published under our editorial standards.