The ransomware attack was carried out by the threat actor coinbasecartel, affecting SAExploration Holdings, Inc., an oilfield services company based in the US, which provides seismic data acquisition and logistical support services. The incident impacted the United States.
Incident Details
- Victim: SAExploration
- Country: US
- Actor: coinbasecartel
- Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/saexploration
- Discovered: 2025-11-20 22:44:12.651877
- Published: 2025-11-20 22:43:58.439265
Information
- SAExploration Holdings, Inc. is an oilfield services company specializing in seismic data acquisition and logistical support.
- The company was targeted in a ransomware attack.
- The threat actor responsible for the attack is known as coinbasecartel.
Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.