MORSEMOVING Listed by blackbasta Ransomware Group

Morse Moving was listed on the Black Basta ransomware group's leak site on June 20, 2023. The family-owned relocation company, founded in 1954 and still operated by descendants of its founders, is claimed to have had internal files exfiltrated during a ransomware attack. The leak-site listing does not specify the number of people affected or detail exactly which records were taken.

Primary Disclosure Details

The Black Basta leak site entry for MORSEMOVING states that the company suffered a ransomware incident and that attackers successfully exfiltrated internal files. No victim count, no list of specific data types, and no ransom demand figure appear in the posting. The disclosure indicates the data is now available for download to anyone who visits the onion site or its mirrors. Public reporting on Black Basta confirms this is their standard method of applying pressure after encryption: publish proof of theft and threaten full release unless payment is made.

Why This Matters for You and Your Family

When a moving company is breached, the files taken often contain names, addresses, phone numbers, dates of birth, Social Security numbers, payment details, and employment records for both customers and employees. Even though the exact contents remain undisclosed, internal files exfiltrated in these incidents routinely include the personal information families provide when arranging a household move. If your family used Morse Moving at any point since the company began digitizing records, your data may now sit in a criminal archive. That exposure does not expire when the news cycle moves on.

Doxxing and Identity-Chain Risks

Stolen moving-company files create high-quality seeds for doxxing chains. An address tied to a name and phone number quickly links to social-media accounts, children's school records, vehicle registrations, and gaming usernames. Attackers then use those connections to impersonate family members, file fraudulent tax returns, or hijack online accounts. Credential leaks of this kind frequently cascade into gaming-account takeovers, especially for children who reuse email addresses or passwords across platforms. Once one family member is identified, the entire household becomes easier to target.

Black Basta's Known Track Record

Public reporting attributes Black Basta's first appearances to early 2022. The group rapidly became one of the most active ransomware operations, hitting healthcare providers, manufacturers, and professional-services firms. Their playbook typically begins with phishing or exploited remote-access tools, followed by deployment of custom ransomware that both encrypts systems and exfiltrates data before triggering the demand. They maintain a dual extortion model: demand payment to decrypt files and a second payment to prevent publication. When victims refuse, Black Basta posts samples and eventually the full archive on their leak site, exactly as occurred with Morse Moving on June 20, 2023.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used with Morse Moving or any related vendor, and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children's gaming accounts that often chain back to the same breached address or email.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites on your behalf.

The incident shows how even a local family business's breach can expose thousands of ordinary households to long-term risk. Acting quickly on the credentials and personal details already circulating can limit damage before identity thieves finish assembling their chains. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children's gaming accounts. Start your DoxxScan trial today and close the gaps criminals count on.