Ransomware needs a way in. Stolen credentials are the cheapest one.

ILDefenseLeaks : Optum Industrial Engineering Systems Ransomware Attack

optum-ies.comRansomed

toufanGroup

IsraelCountry

Jan 6, 2026Discovered

Overview

View group profile

Domain

optum-ies.com

Industry

Technology

Country

Israel

Discovered

7 months ago

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

toufan

Total victims

First seen

Sep 2025

Last seen

Mar 2026

Group status

active

Sophistication

Impact score

Threat level

2.3/10

Aggressiveness5/10

Lethality0.6/10

Criticality1/10

Status breakdown

Data Leaked11.1%4

Claimed

this victim

88.9%32

Targeted sectors

Education Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Technology

Known target sector

Country

Israel

Frequently targeted country

Other victims

View all (36)

Same group · toufan

Optum Industrial Engineering Systems
—
Claimed
Saar Engineering – “saarengineer.com”
—
Claimed
Oz Aviation ltd.
—
Claimed
ACOM Communication Strategies
—
Claimed
UPC Precision Castings Ltd – “upccastings.com”
—
Claimed
Maya Engineering – “maya-il.com”
Israel
Claimed

Group activity