dasteam.ch Listed by Black Basta Ransomware Group

On February 21, 2024, the Swiss staffing firm dasteam.ch appeared on the leak site operated by the Black Basta ransomware group. The listing states that attackers exfiltrated 202 GB of internal files categorized as customer records, HR documents, and accounting data following a ransomware incident. Anyone whose personal information was stored in those systems — employees, job applicants, contractors, or clients — may now face heightened risk of identity theft and targeted fraud.

Reported Details from the Listing

The Black Basta leak page, archived via ransomware.live, explicitly names dasteam.ch and lists the data volume as 202 GB. It breaks the material into four folders: Kunden (customers), HR, BuHa (accounting), and one additional unspecified category. The disclosure does not quantify the number of individuals affected, nor does it publish samples of the stolen files. The company, which specializes in construction, industrial, and medical staffing, has operated from its Basel address since 1987 and employs between 101 and 250 people.

Black Basta’s public posting follows their standard pattern of first demanding ransom and then publishing proof of exfiltration when payment is refused or ignored. No ransom amount is shown on the listing itself.

Why This Matters for You and Your Family

If you have ever worked for dasteam.ch, applied through them, or used their recruiting services, your name, address, date of birth, national identification numbers, bank details, or employment history could be among the records now held by criminals. HR and customer files routinely contain exactly this kind of information. Once exposed, these details fuel identity theft, loan fraud, and convincing phishing campaigns that target you or members of your household.

Even if you are not certain your data was involved, the uncertainty itself creates stress. Families often share email addresses or phone numbers across job applications and client accounts, so one breach can quietly expose multiple people living at the same address.

Doxxing and Identity-Chain Risks

Stolen HR and customer files rarely stay isolated. Attackers combine them with other leaks to build detailed profiles that link your work history, home address, email addresses, and phone numbers. These chains allow criminals to hijack online accounts, impersonate you to family members, or sell the bundle on dark-web marketplaces. Children’s gaming accounts that reuse an exposed parent email or password become especially vulnerable entry points for further harassment and doxxing.

Credential leaks like this one cascade into account takeovers that can follow you for years unless the connections are deliberately mapped and broken.

Black Basta’s Known Track Record

Public reporting attributes the first Black Basta attacks to early 2022. The group has since hit hospitals, manufacturers, and professional-services firms across North America and Europe. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by rapid exfiltration of sensitive folders before encryption. They then demand payment in Bitcoin and, if unpaid, publish victim data on their Tor leak site while simultaneously contacting journalists and business partners to increase pressure. The dasteam.ch listing fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at dasteam.ch or related recruiting portals, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household — DoxxScan family protection extends to dependents and children’s gaming accounts that often chain back to the same breached email or address.
• Let remediation specialists handle ongoing takedown requests for any personal records that surface on data-broker or extortion sites.

The dasteam.ch breach is a reminder that even mid-sized staffing companies hold information that can endanger entire families long after the initial incident. Taking deliberate steps now limits how far criminals can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts at risk from cascading credential leaks.