City of Edgewater Ransomware Claim by Booba Project (Nov 2026)

Claim Summary

The Booba Project ransomware group has allegedly listed the City of Edgewater, a US municipal government entity, on its dark web leak site. According to the threat actor, the attack purportedly occurred on November 3, 2026, and the group claims to have exfiltrated approximately 47 GB of data categorized as “Government Administration” records.

This claim remains entirely unverified. The City of Edgewater has not publicly confirmed any breach, and no independent security firm has validated the group’s assertions. Ransomware operators frequently inflate data volumes and misrepresent the sensitivity of stolen material to increase pressure on victims during extortion negotiations. The 47 GB figure should be treated as the group’s own marketing claim rather than a measured fact.

Threat Actor Profile

The Booba Project is a relatively low-profile ransomware operation with no established public research footprint. Open-source intelligence provides no confirmed total victim count, no documented toolset, and no published technical analyses of the group’s malware, infrastructure, or tactics, techniques, and procedures (TTPs).

This absence of documentation is itself a meaningful signal. Established ransomware operations typically leave detectable traces - leaked builders, analyzed encryptors, or documented affiliate behavior - that researchers can catalog. The Booba Project’s lack of a public track record means its credibility cannot be assessed against prior campaigns. It may be a new or rebranded operation, a low-volume affiliate, or a group that deliberately avoids the visibility that attracts law enforcement and researcher attention.

Because no YARA rules, detection signatures, or behavioral indicators are publicly available for this group, defenders should rely on generic ransomware detection guidance: monitoring for mass file encryption, unusual data staging and archiving, anomalous outbound transfers, and unauthorized access to backup infrastructure.

Alleged Data Exposure

The group claims to hold 47 GB of “Government Administration” data. Municipal governments typically hold records including internal communications, procurement documents, HR files, and citizen service records. If the claim is accurate, such data could include sensitive operational information.

However, no samples have been independently reviewed, and the group has not provided verifiable proof beyond its own leak site listing. Yazoul Security does not reproduce, link to, or facilitate access to any leaked material. Organizations should not attempt to retrieve purported samples from untrusted sources.

Potential Impact

If validated, a breach of this nature could expose municipal operational data, create privacy obligations under state breach notification laws, and invite phishing or social engineering against city staff. Public-sector victims also face reputational and public-trust consequences. That said, these are contingent risks based solely on the actor’s unverified assertions.

What to Watch For

• Official statements from City of Edgewater confirming or denying the claim
• State or federal advisories referencing the Booba Project
• Publication of technical indicators by independent researchers
• Any observed reuse of the group’s infrastructure in other campaigns

Disclaimer

This report is based entirely on an unverified claim posted to a ransomware group’s leak site. Nothing herein has been independently verified by Yazoul Security. The Booba Project may be exaggerating, misrepresenting, or fabricating details. Treat all specifics as allegations until confirmed by the victim or authoritative sources. For related monitoring, see our intel hub.