Optima Tax Relief, a major U.S. tax resolution firm, has been hit by a Chaos ransomware attack, with the threat actors now leaking sensitive data allegedly stolen during the incident.
The attackers claim to have exfiltrated 69 GB of data, which reportedly includes corporate files and client case documents. Given the nature of the company’s work, this likely involves highly sensitive personal information such as Social Security numbers, contact details, and home addresses data that could be exploited for fraud or identity theft.
Sources reveal that the breach involved a double-extortion tactic, meaning the attackers not only stole data but also encrypted company servers, increasing pressure on the firm to pay a ransom.
The Chaos ransomware operation, which surfaced in March 2025, is relatively new but has quickly gained attention after listing multiple victims on its data leak site. It's important not to confuse this group with the earlier Chaos ransomware builder from 2021, which was a tool used to create custom ransomware strains.
In addition to Optima, the group also recently claimed responsibility for an attack on The Salvation Army, although the organization has not responded to inquiries regarding the breach.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
