Ransomware victim disclosure
← All victimsCourtSmart
Claimed by Bavacai · listed 15 days ago
Status timeline
- Listed
May 5, 2026
- Data leaked
At a glance
- Group
- Bavacai
- Status
- Data leaked
- Country
- US
- Sector
- Business Services
- Listed on leak site
- May 5, 2026
About the victim
AI dossier — public-source company profileCourtSmart (courtsmart.com) is a US-based court technology company operating under the domain COURTSMART2, providing software or technology solutions to court systems. The leak post references connections to JIS.org and nashville.org, suggesting integration with judicial information systems and potentially Nashville-area courts. No additional public site content was available to confirm scale or headquarters.
- Industry
- Court Technology & Legal Software
Attack summary
Severity: high — Data has been published (disclosed status: data_published) from a court technology provider with stated connections to judicial information systems. Court-related data is likely to contain sensitive legal records, case information, and potentially PII of litigants or court personnel, elevating severity. Absence of confirmed regulated data volume at scale prevents critical classification.The Bavacai ransomware group claims to have compromised CourtSmart's infrastructure, including a development server (dev-rich20.courtsmart.com), and has disclosed data (status: data_published). The post references connections to judicial information systems (JIS.org) and nashville.org, implying access to court-related data.
Data the group says was taken
AI dossier — extracted from the leak post- Development server data
- Court system integration data
- Judicial information system connections
- Internal domain/network data
What the group claims
Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
The leak post
captured from the group's siteFile Manager File Manager home page BARAAAI Data is being prepared for publication. BAPAMAI Data is being prepared for publication. BAUARAI Data is being prepared for publication. BAVADAI Data is being prepared for publication. BAVACAI Data is being prepared for publication. BAVAQAI Data is being prepared for publication. Raycolighting DEMO 3137 S Alameda Street, Los Angeles, CA 90058, USA $10 000 Organization with 2 emails extracted. Domain: raycolighting.com baralai Data is being prepared for publication. CEAGESP / Netfeirasp DEMO São Paulo, Brazil $20 000 Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts. Colegio María Inmaculada (CMI) DEMO Moravia, San José, Costa Rica $50000 Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2. Académie de Montpellier / CSJM DEMO Béziers, Occitanie, France $15000 French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials. Palmers Relocations DEMO Victoria, Australia $63 000 Australian …
Sources
Source
Indexed 15 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
