Moonlight Basin
Attack Intelligence
Moonlight Basin was compromised in a ransomware attack attributed to akira in November 2025. The organization, operating in the Hospitality and Tourism sector in United States, was added to the group's data leak site as part of an extortion campaign.
akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Moonlight Basin offers the best snow conditions in Montana, firstclass rental lodging and vacation homes, fine dining, spa services, and easy access to attractions such as Yellowstone National Park and seasonal activities such as fishing, horseback riding, hiking, and rafting, Moonlight Basin is also known for providing anextraordinary level of guest service.We will upload 17gb of corporate documents soon. A bit of client and employee data, lots of internal reports, contracts and agreements, accounting and financial documents, NDA, etc.