jonti-craft.com Listed by Black Basta Ransomware Group

On October 18, 2024, the ransomware group Black Basta added jonti-craft.com to its public leak site, listing the Minnesota-based children’s furniture manufacturer as a victim and claiming to have exfiltrated roughly 700 GB of internal files.

Primary Disclosure Details

The Black Basta leak site states that Jonti-Craft suffered a ransomware attack in which attackers exfiltrated internal files before encrypting systems. The listing does not specify the exact number of people affected. It categorizes the stolen material as including home users data, financial data and payroll records, personal information, human resources files, engineering documents, and additional departmental data. The disclosure indicates the data volume reached approximately 700 GB. No ransom amount or payment deadline appears in the public listing.

Why This Matters for You and Your Family

When a company that supplies furniture to daycares, schools, and pediatric offices is breached, the ripple effects reach ordinary families. Payroll and human-resources files often contain names, addresses, Social Security numbers, and banking details of current and former employees. Financial records can expose vendor payments and customer invoices. If your child attends a facility that uses Jonti-Craft products, or if you or a family member ever worked there, your personal information may now sit in an attacker-controlled archive. The disclosure indicates the stolen material includes personal and HR data, which attackers routinely sell or publish to pressure the victim or to profit on underground markets.

Doxxing and Identity-Chain Risks

Leaked HR and payroll files frequently contain enough detail to link an individual’s work email, phone number, physical address, and date of birth. Once those pieces surface, criminals can chain them with usernames found in other breaches to take over email accounts, gaming profiles, or social-media handles. A single exposed work email can lead to password-reset attacks against personal services. For families, the danger compounds when children’s school or daycare records indirectly tie back to the same household address. Public reporting on similar incidents shows that initial credential leaks often cascade into full identity theft, account takeovers, and targeted harassment. Personal and financial data from this volume of records can fuel years of fraud if not addressed quickly.

Black Basta’s Known Track Record

Public reporting attributes Black Basta’s first appearance to early 2022. The group has since hit hospitals, manufacturers, universities, and local governments across North America and Europe. Its typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, the operators wait a short period before publishing samples on their leak site to coerce payment. They have repeatedly demonstrated willingness to release sensitive employee and customer records when victims refuse to pay. The exact tactics used against Jonti-Craft remain unknown, but the group’s established pattern suggests the data was removed weeks before the October 18 listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you used at jonti-craft.com or any related work account, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address and email domain.
• Let remediation specialists handle data-broker takedown requests and follow-up monitoring for you while you focus on securing day-to-day accounts.

The incident underscores how quickly a single vendor breach can expose ordinary families to long-term identity risk. Starting proactive defenses now limits what criminals can build from the 700 GB already taken. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give families a practical way to reduce that exposure before the next leak appears.