blackbasta attacks Grohmann Aluworks GmbH & Co

Incident Date:

August 6, 2022

World map



blackbasta attacks Grohmann Aluworks GmbH & Co


Grohmann Aluworks GmbH & Co




Bisingen, Germany

Germany, Germany

First Reported

August 6, 2022

Grohmann Aluworks GmbH & Co. Targeted by Blackbasta Ransomware Group

Company Overview

Grohmann Aluworks GmbH & Co. is a family-owned business that has been at the forefront of aluminum casting technology since its inception in 1930. The company is known for its commitment to innovation, quality, and customer satisfaction. It offers a wide range of aluminum casting services, from prototyping and development to manufacturing and assembly.

Industry Standing

Grohmann Aluworks GmbH & Co. is a significant player in the aluminum casting industry, with a strong focus on automotive applications. The company's expertise in aluminum casting has made it a preferred supplier for major automotive manufacturers, who demand high-quality components that meet stringent industry standards.


The specific vulnerabilities that led to the successful attack on Grohmann Aluworks GmbH & Co. by the Blackbasta ransomware group are not detailed in the available information. However, it is known that the Blackbasta ransomware group uses a Ransomware as a Service (RaaS) model, and their ransomware, ALPHV, is written in the Rust programming language and supports execution on various operating systems, including Windows, Linux, and VMWare ESXi.

The attack on Grohmann Aluworks GmbH & Co. by the Blackbasta ransomware group highlights the ongoing threat of cyber attacks in the manufacturing sector. Companies in this sector must remain vigilant and implement robust cybersecurity measures to protect their operations and data from such threats.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.