Chaos Claims Ransomware Attack on ITC Group

Summary

A ransomware.live monitoring post attributes an unconfirmed ransomware and extortion claim against ITC Group to Chaos. The group reportedly claims files were encrypted and sensitive data could be released unless a ransom is paid.

Key points

The monitoring post names ITC Group, a Germany-based construction company, as the claimed victim.
The claim is attributed to the Chaos ransomware group and listed as discovered and published on April 14, 2026.
Chaos reportedly claims files were encrypted and threatens to release sensitive data unless a ransom is paid.
The post says the claims are unconfirmed; it provides no confirmation from ITC Group.

Article Details

Victim: ITC Construction Group
Victim Domain: itc-group.com
Claim Date: 2026-04-14
Encryption Status: Chaos claims files were encrypted; the source says the claim could not be confirmed.
Exfiltration Status: Not confirmed; the source reports a threat to release data but does not establish exfiltration.
Exfiltrated Data: Sensitive data was reportedly threatened with release, according to the group's claim.
Ransom Demand: The claim says release could be prevented by paying a ransom; no amount is disclosed.
Leak Status: Release was threatened; publication of data is not confirmed.

Threat Actors

chaosThe group claims responsibility for a ransomware attack against ITC Construction Group; the source says the claim could not be confirmed.

Countries

GermanyChaos claims a ransomware attack against ITC Group (itc-group.com), the Germany-based ITC Construction Group founded in 1983 that specializes in residential high rises, mixed-use developments, and select commercial

Industries

ConstructionChaos claims a ransomware attack against ITC Group (itc-group.com), the Germany-based ITC Construction Group founded in 1983 that specializes in residential high rises, mixed-use developments, and select commercial