[NITROGEN] – Ransomware Victim: Black Hills Bentonite

AI Generated Summary of the Ransomware Leak Page

Black Hills Bentonite, a United States-based manufacturing company founded in 1947 that mines and processes sodium bentonite—an industrial clay used in well drilling, metal casting, and pond and landfill sealing—appears on a ransomware leak page as a listed victim. The entry is attributed to the Nitrogen group. The metadata records a post date of 2025-11-06 13:39:03.311866; no compromise date is provided in the data, so this date is treated as the post date. The post does not specify whether the attackers encrypted systems, exfiltrated data, or both, and there is no ransom amount or demand noted. A claim URL is present on the leak page, though there are no additional linked items. The page includes no screenshots or imagery.

From the available metadata, there are no images, downloads, or other files associated with this entry: downloads_present is false, images_count is 0, and link_count is 0. The body_excerpt is empty and the annotations collection contains no entries, indicating a minimal listing rather than a full leak dossier. In short, the post identifies the victim and provides the post date but does not reveal the nature of the impact (e.g., encryption or data leakage) or any ransom figures. The presence of a claim URL suggests the attackers issued a statement, but no substantive data or documents are shown at this time. Continued monitoring of the listing is advised for any future updates.