The cloak ransomware group listed ba**********.org on its data leak site on 2025-02-25.