VULNpocalypse
LowBreach / campaignMonitoring

City of Edgewater: Booba Team ransomware group claims attack on leak site

The booba team ransomware group claims an attack on the City of Edgewater, unconfirmed; watch for an official notice from the city before acting.

Published
Exploitation
No, not confirmed: the only evidence is the group’s own leak-site listing as tracked by RansomLook

What happened

The Booba Team ransomware group claims on its leak site that it attacked the City of Edgewater, according to the claim tracker RansomLook. RansomLook records the listing on 2026-11-03. The listing:

  • Categorises the victim as “Government Administration”.
  • Gives the website www.cityofedgewater.org.
  • States “Stolen data: 47 GB”.

This is the group’s own claim. Several things are not confirmed:

  • No confirmation from the victim: none of the sources shows that the City of Edgewater has confirmed an incident.
  • No independent verification: no independent outlet has reported on the claim. The only source is the claim tracker.
  • Unknown details: the entry point, the kind of data and whether any systems were encrypted are not confirmed. The 47 GB figure comes only from the group.
  • Which Edgewater: the listing does not name a state.

RansomLook also shows other listings that Booba Team posted around the same time (RansomLook):

  • Several other local government entities, including South Weber City and Terrebonne Parish Government on 2026-10-29.
  • 61 posts by the group in total, 26 of them in the last 30 days.

The group’s site has a generic “About Us” text, which RansomLook reproduces. In it, the group describes itself as offering “data decryption services” and says it extracts data “prior to system lockdown”. This text is not specific to Edgewater.

Am I affected?

This is not confirmed. The sources do not say what data is involved or who it concerns.

You could be affected if both of these are true:

  • You are a resident, employee or vendor of the city that uses the website www.cityofedgewater.org.
  • The claim turns out to be accurate.

No software product, package or vulnerability is named, so there is nothing to patch.

What to do now

  1. Treat the listing as a claim. Do not download or share any files the group may post.
  2. Watch the City of Edgewater’s own official channels for a statement or a breach notification. As of 2026-11-03, the sources show none.
  3. If you deal with the city, be careful with unexpected messages that mention this incident or ask for payment or credentials. This is general precaution, not something the source reports.
  4. Check back for updates. This advisory will change if the city or an independent outlet confirms or disputes the claim.

Sources