Data Breaches

Security Firm Andy Frain Says 100,000 People Impacted by Ransomware Attack

Andy Frain was targeted by the Black Basta ransomware group in 2024 and the hackers have stolen a wide range of information.

Andy Frain was targeted by the Black Basta ransomware group in 2024 and the hackers have stolen a wide range of information.

Illinois-based physical security company Andy Frain Services revealed on Friday that a data breach suffered last year impacts more than 100,000 people.

Andy Frain provides security services for major sports arenas, event venues, universities, commercial businesses, airports, and organizations in the transportation industry.

The data breach notification letter sent by the company to impacted individuals does not contain any technical details on the incident and it’s unclear exactly what type of information has been compromised. 

However, the information is likely sensitive considering that impacted individuals are being offered 12 months of credit monitoring and identity restoration services. 

Andy Frain told the Maine Attorney General’s Office that the breach was discovered in October 2024 and that more than 100,000 people were impacted.

The Black Basta ransomware group took credit for the Andy Frain hack in November 2024, claiming to have stolen 750 Gb of files, including ones related to accounting, HR, and legal departments. 

Advertisement. Scroll to continue reading.

The cybercrime group has not announced any new victims for several months. Experts said it went underground, but the hackers are expected to return, likely in a different form.

Related: 437,000 Impacted by Ascension Health Data Breach

Related: US Deportation Airline GlobalX Confirms Hack

Related: 160,000 Impacted by Valsoft Data Breach

Related: Company and Personal Data Compromised in Recent Insight Partners Hack

Related Content

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Data Breaches

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

Data Breaches

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Data Breaches

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

Data Breaches

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Data Breaches

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

Data Breaches

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

Data Breaches

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version