Optima Tax Relief Hit by Chaos Ransomware Attack, Exposing 69GB of Sensitive Data
A prominent U.S. tax resolution firm, Optima Tax Relief, has fallen victim to a ransomware attack by the Chaos group, which claims to have stolen 69GB of sensitive data before encrypting the company’s systems. The breach, disclosed earlier this week, includes customer case files containing highly valuable personal and financial information, such as Social Security numbers, home addresses, and phone numbers data that cybercriminals can exploit for identity theft and financial fraud.
The attack follows a double-extortion tactic, where the ransomware gang not only encrypts victim data but also threatens to leak it unless a ransom is paid. While Optima has not publicly confirmed whether it will pay or notify affected individuals, the incident raises concerns about regulatory compliance and consumer protection, particularly given the firm’s handling of tax-related records.
Chaos ransomware, which emerged in March 2025, has quickly established itself as a threat to high-value targets. Unlike an earlier DIY ransomware toolkit of the same name, this group operates as a coordinated team, strategically targeting organizations with access to large volumes of personally identifiable information (PII). Optima is not the group’s only recent victim Chaos also claimed an attack on the Salvation Army in May, though the organization has not confirmed the breach.
As of now, Optima has not issued an official statement, and there is no confirmation of law enforcement or federal agency involvement. The full dataset has not been published, but the leak site listing alone underscores the growing risk of ransomware attacks on financial service providers, which have increasingly become prime targets for cybercriminals. Unlike other breached data, tax information cannot be easily reset, leaving victims vulnerable to long-term fraud and reputational harm.
Source: https://www.foxnews.com/tech/chaos-ransomware-hits-optima-tax-relief-leaks-69gb-data
Optima Tax Relief cybersecurity rating report: https://www.rankiteo.com/company/optimataxrelief
"id": "OPT1770288581",
"linkid": "optimataxrelief",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'financial services',
'location': 'U.S.',
'name': 'Optima Tax Relief',
'type': 'tax resolution firm'}],
'data_breach': {'data_encryption': 'yes',
'data_exfiltration': 'yes',
'personally_identifiable_information': 'yes',
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['customer case files',
'Social Security numbers',
'home addresses',
'phone numbers']},
'description': 'A prominent U.S. tax resolution firm, Optima Tax Relief, has '
'fallen victim to a ransomware attack by the Chaos group, '
'which claims to have stolen 69GB of sensitive data before '
'encrypting the company’s systems. The breach includes '
'customer case files containing highly valuable personal and '
'financial information, such as Social Security numbers, home '
'addresses, and phone numbers, data that cybercriminals can '
'exploit for identity theft and financial fraud.',
'impact': {'brand_reputation_impact': 'high',
'data_compromised': '69GB of sensitive data',
'identity_theft_risk': 'high',
'legal_liabilities': 'potential'},
'motivation': 'financial gain, data exfiltration',
'ransomware': {'data_encryption': 'yes',
'data_exfiltration': 'yes',
'ransomware_strain': 'Chaos'},
'references': [{'source': 'incident description'}],
'threat_actor': 'Chaos ransomware group',
'title': 'Optima Tax Relief Hit by Chaos Ransomware Attack',
'type': 'ransomware'}