Andy Frain Services has confirmed that over 100,000 people were impacted in a major ransomware attack last year. The breach, which took place in October 2024, was later claimed by the cybercrime group Black Basta.
Based in Illinois, Andy Frain provides physical security for airports, event venues, stadiums, and universities across the U.S. The breach affected a wide range of individuals connected to the company’s operations.
While the company’s notification didn’t share exact details about what was stolen, it’s clear the stolen data was sensitive. Andy Frain is now offering affected individuals up to 24 months of free credit monitoring and identity restoration—an industry standard response when personal or financial data may be at risk.
In November 2024, Black Basta took credit for the attack. The group claimed to have stolen 750 gigabytes of internal files, including documents from HR, accounting, and legal departments. This suggests the attackers accessed deeply confidential company records.
Security experts say the Black Basta group has been quiet in recent months. Many believe the group has temporarily gone underground and may reappear soon under a different name or structure.
The Andy Frain ransomware attack has raised serious concerns across the physical security industry. It highlights how even companies that focus on real-world safety can become prime targets for cybercriminals.
As ransomware attacks become more frequent and complex, firms that manage critical infrastructure and personal data are under growing pressure to strengthen their digital defenses. Andy Frain’s breach serves as a clear warning: cyber threats can affect any organization, no matter its core business.
