New Century Advisors, LLC Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 07, 2023, New Century Advisors, LLC appeared on a listing associated with the 8base ransomware group. Public detail indicates that internal files were claimed to have been exfiltrated in a ransomware attack. The number of people affected remains unknown, and broader specifics about timing, method, and exact contents have not been disclosed.

For clients, employees, and partners of an investment advisory firm, any exposure of internal files carries practical stakes: financial strategies, correspondence, and related records can create lasting risks of fraud, targeted outreach, or misuse of sensitive business information. What is confirmed publicly is limited; what matters is understanding the claim, the typical patterns of this actor, and the concrete steps people can take to protect themselves.

Breaking down the breach

According to the available record, New Century Advisors, LLC was listed by the 8base ransomware group on or about July 07, 2023. The reported summary states that internal files were exfiltrated in a ransomware attack. No confirmed figure for people affected has been published, and public detail does not describe the initial access method, the duration of any intrusion, the volume of data taken, or whether a ransom demand was paid or refused.

The listing itself is a claim by the group. Independent confirmation of the full scope, the precise file sets involved, or any subsequent release of material is not provided in the facts available here. In short, the incident is framed as a ransomware event involving claimed exfiltration of internal files, with most operational details remaining undisclosed.

Who is 8base?

8base is a ransomware operation that became more widely observed in public reporting around 2022–2023. Like many groups in this category, it has been associated with double-extortion tactics: encrypting systems while also copying data and threatening to publish or auction it if a payment is not made. The group has maintained a leak site on which it names alleged victims and, in some cases, posts samples or larger archives.

Public analyses of 8base activity have described relatively standardized ransomware tooling, pressure campaigns against organizations across multiple sectors, and the use of leak-site postings as leverage. None of that general background states the specific contents or outcome of any single listing. In this case, the group’s claim is that New Century Advisors, LLC was a victim and that internal files were taken; those assertions should be treated as unverified claims unless corroborated by the organization or other independent evidence.

About New Century Advisors, LLC

New Century Advisors, LLC is an investment advisory firm founded in 2002. According to the firm’s own description in the available record, it partners with clients to develop and execute customized strategies, including core, inflation-linked, short-duration, multi-asset, and equity strategies. It emphasizes risk-adjusted returns and a high-touch client service model. Its clients have included prestigious public funds, corporations, endowments, foundations, healthcare systems, and insurance companies. The firm is entirely employee-owned, and its principals have a long shared working history.

Firms of this type routinely handle portfolio data, investment mandates, client agreements, correspondence, and internal operational records. A breach affecting such an organization is consequential because the information involved can touch institutional investors, plan beneficiaries, corporate treasuries, and other parties who rely on confidentiality and the integrity of financial decision-making processes. Even when the exact data set is unconfirmed, the sector context explains why a claimed exfiltration of internal files draws attention.

What was likely exposed

The facts name the exposed material only as internal files exfiltrated in a ransomware attack. No inventory of file types, no count of records, and no confirmation of personal identifiers, account numbers, or specific client documents have been provided in the public summary. Exact contents therefore remain unconfirmed.

Organizations in institutional investment advisory work typically hold materials such as:

• Client and prospect correspondence and relationship files
• Investment policy statements, mandates, and strategy documents
• Portfolio reports, performance data, and related analytics
• Contracts, fee arrangements, and operational records
• Internal business documents and employee-related files

Any of the above could fall under a broad label of “internal files,” but it would be inaccurate to state that particular categories were definitively taken. Readers should treat the exposure as a claimed exfiltration of internal material whose precise composition has not been publicly detailed.

What's at stake

For individuals and institutions connected to New Century Advisors, the primary risks are practical rather than abstract. If client or counterparty information was among the files, affected parties could face targeted phishing, business-email compromise attempts, or social-engineering calls that reference real relationships or transactions. Institutional clients—public funds, endowments, insurers, and similar entities—may need to assess whether any shared data could be misused to impersonate the firm or to probe further into their own environments.

For the organization itself, a ransomware event with claimed exfiltration raises operational, legal, and reputational considerations: restoring systems, notifying appropriate parties where required, reviewing access controls, and communicating clearly with clients. Because the number of people affected is unknown and the file-level detail is undisclosed, the full perimeter of impact cannot be stated as fact. The prudent stance is to assume that internal material may have left the environment and to act on that possibility without inflating what is known.

What to do if you're exposed

If you are a client, employee, or partner who believes your information may have been involved, begin with measured steps. Monitor financial and investment accounts for unexpected activity. Treat unsolicited messages that reference the firm, specific strategies, or personal details with caution; verify through known official channels rather than links or numbers supplied in the message. Consider placing fraud alerts where appropriate and reviewing what information you have previously shared with the firm so you can recognize misuse.

Keep records of any suspicious contact. If you receive notification directly from New Century Advisors, follow the instructions in that notice and use only contact details you already trust. Finally, you can run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets; that check is a simple way to see whether your address appears in publicly compiled breach corpora and to decide whether further monitoring is warranted.

AICompiled with AI assistance from public sources and published under our editorial standards.