Chaos has issued a ransomware/extortion claim against universalplant.com, targeting Universal Plant Services (UPS) in the United States. The threat actor says it possesses 315 GB of corporate, financial, and operational data, including sensitive accounting and payroll information, and demands action under its “FINAL NOTICE” statement. #UnitedStates
Incident Details
- Victim: universalplant.com
- Sector: Agriculture and Food Production
- Country: US
- Actor: chaos
- Source: http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion/post/iA8ZqwqvbWAadhAdslngN5Kiazx2CWrf
- Discovered: 2026-06-30T16:54:50.260413+00:00
- Published: 2026-06-30T16:54:34.472624+00:00
Information
- We are in possession of 315 GB of corporate, financial, and operational data.
- The archive contains highly sensitive information.
- Financial and accounting records include full audits, tax filings (ADP), payroll, and bank transactions.

Disclaimer: This post is based on public claims made by the ransomware group "chaos". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.