The ransomware claim involves Black Hills Bentonite, a U.S.-based company founded in 1947, which specializes in mining and processing sodium bentonite used in various industrial applications. The threat actor, nitrogen, targeted the company, impacting operations in the United States. #UnitedStates
Incident Details
- Victim: Black Hills Bentonite
- Country: US
- Actor: nitrogen
- Source: http://nitrogenczslprh3xyw6lh5xyjvmsz7ciljoqxxknd7uymkfetfhgvqd.onion/posts/690c9ded13b9b6ae96964033
- Discovered: 2025-11-06 13:39:20.204463
- Published: 2025-11-06 13:39:03.311866
Information
- An American company founded in 1947 specializing in mining and processing sodium bentonite.
- Uses of sodium bentonite include well drilling, metal casting, pond, and landfill sealing.
- Associated with a ransomware incident involving the actor Nitrogen.

Disclaimer: This post is based on public claims made by the ransomware group "nitrogen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.