Optima Tax Relief Data Breach & Ransomware Attack
- tax resolution firm, is grappling with the fallout from a chaos ransomware attack.
- The company, which assists individuals and businesses with federal and state tax issues, touts itself as a leader in the tax resolution industry, claiming to have resolved over...
- The Chaos ransomware group has added Optima Tax Relief to its data leak site, asserting that they exfiltrated 69 GB of data during the cyber attack.
Optima Tax Relief, a leading U.S. tax resolution firm, faces a significant crisis: a devastating ransomware attack.Cybercriminals claim to have pilfered 69 GB of sensitive data, including customer case files and personal facts, following this recent data breach. This attack, orchestrated by the Chaos ransomware group, highlights the escalating dangers of cyber threats and the crucial role of robust cybersecurity measures for businesses. The stolen data, potentially exposing clients to identity theft, has been added to Chaos’s data leak site, signaling a double-extortion attempt. This ransomware attack underscores the relentless sophistication of modern cybercrime targeting sensitive financial data. News Directory 3 is staying on top of this story. Discover what’s next for Optima Tax Relief and its clients.
Optima Tax Relief Data Leaked After Chaos Ransomware Attack
Updated June 6, 2025
Optima Tax Relief, a prominent U.S. tax resolution firm, is grappling with the fallout from a chaos ransomware attack. The cybercriminals behind the attack are now leaking data they claim to have stolen from the company.
The company, which assists individuals and businesses with federal and state tax issues, touts itself as a leader in the tax resolution industry, claiming to have resolved over $3 billion in tax liabilities for its clientele.

The Chaos ransomware group has added Optima Tax Relief to its data leak site, asserting that they exfiltrated 69 GB of data during the cyber attack. This data reportedly encompasses corporate information and customer case files. Tax documents often contain sensitive details such as Social Security numbers, phone numbers, and home addresses, raising concerns about potential identity theft and other malicious activities.
Sources indicate that this was a double-extortion attack, meaning the threat actors not only stole data but also encrypted Optima Tax Relief’s servers. this ransomware attack highlights the increasing sophistication and severity of cyber threats facing businesses today. The role of cybersecurity has never been more crucial.
The Chaos ransomware operation emerged in March 2025, quickly claiming multiple victims on its data leak site.It is indeed distinct from the Chaos ransomware builder, which has been used as 2021 to create various branded encryptors for phishing and malware campaigns. This data breach underscores the need for robust security measures.
The ransomware group previously claimed obligation for breaching the Salvation Army. Optima Tax Relief has been contacted for comment regarding the incident.
