Optima Tax Relief Hit by Chaos Ransomware: Sensitive Data Leaked
Optima Tax Relief Faces Ransomware Breach
A recent cyberattack has resulted in a significant data breach at Optima Tax Relief, a well-known tax resolution company in the United States. The attack was executed by a group known as Chaos ransomware, who have allegedly stolen and leaked a substantial amount of sensitive data.
Optima Tax Relief is recognized for assisting both individuals and businesses with complex tax issues, boasting over $3 billion in resolved tax debts. However, the Chaos group claims to have hijacked approximately 69 GB of data, listing the firm on their data leak website. This breach includes corporate information and sensitive client files. Given that tax documents hold critical personal data like Social Security numbers, phone numbers, and addresses, this poses serious risks for identity theft and other malicious activities.
Understanding the Chaos Ransomware Threat
This incident is classified as a double-extortion attack, where the attackers not only encrypted Optima’s servers but also exfiltrated valuable data. Chaos ransomware, a relatively new threat since its emergence in March 2025, has been linked to multiple similar breaches. It’s important to note that this group is distinct from an older variant used in phishing campaigns.
Besides Optima, the Chaos group has also claimed breaches at other organizations, including the Salvation Army, though attempts to get comments from them have been unsuccessful. BleepingComputer continues to seek further details from Optima regarding this attack and remains vigilant for updates.
Stay informed about the latest in tech security with Qsentinel, your reliable source for tech news and insights.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more

