Chaos ransomware claims WTI Transport infiltration and threatens data release

Summary
Chaos claims it infiltrated WTI Transport in Germany and threatens to publish confidential data unless management makes contact within 72 hours. The monitoring post says the claim is unconfirmed.
Key points
- The post attributes an infiltration and extortion claim against WTI Transport, a German trucking company, to the Chaos ransomware group.
- Chaos reportedly gave management 72 hours to make contact, threatening to publish confidential data afterward and end further negotiations.
- The claim is attributed to an actor post and monitored by ransomware.live; the article says it cannot confirm the claim's accuracy.
Article Details
- Victim
- WTI Transport
- Victim Domain
- wtitransport.com
- Claim Date
- 2026-05-17
- Encryption Status
- Unknown; the source does not report encryption.
- Exfiltration Status
- Unknown; the group claims infiltration, but exfiltration is not confirmed.
- Exfiltrated Data
- The group threatens to publish confidential data; the source does not confirm that data was exfiltrated.
- Ransom Demand
- No monetary ransom demand reported; the group demands that company management make contact within 72 hours.
- Leak Status
- Publication is threatened if management does not make contact; the source does not report that data has been published.
