2024 BT Group — Black Basta claims vs. BT Conferencing division; segregated server isolation
Data compromised
Actor-claimed employee and corporate document imagery; BT disputed customer-facing live-service impact in contemporaneous quotes
Technical writeup
BT Group publicly acknowledged an attempted cyberattack centered on its BT Conferencing business after the Black Basta ransomware group marketed a large corporate data theft narrative. Vendor statements relayed by The Register and Recorded Future emphasized rapid isolation of a limited set of non–live-service infrastructure and ongoing law-enforcement engagement, with debate in coverage between criminal marketing and the company’s containment claims.
Root cause
External criminal intrusion / extortion attempt against conferencing infrastructure (specific initial vector not uniformly detailed)