Chaos ransomware claims to have infiltrated wtitransport.com (WTI Transport, Germany) and demands that company management contact the attackers within 72 hours, warning that confidential data will be published on a public platform and further negotiations will end afterward. The threatened disclosure and impact are in #Germany
Incident Details
- Victim: wtitransport.com
- Sector: Transportation/Logistics
- Country: DE
- Actor: chaos
- Source: http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/post/e4KoedyitHjpW0zJMn7tNzN3OlHRasDa
- Discovered: 2026-05-17T19:51:51.325860+00:00
- Published: 2026-05-17T19:51:37.387776+00:00
Information
- WTI Transport is a flatbed trucking company headquartered in Germany.
- Company management has exactly 72 hours to make contact.
- If no contact is made within that time, confidential data will be published on a public platform.
- After the deadline, further negotiations will no longer be possible.
Disclaimer: This post is based on public claims made by the ransomware group "chaos". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.