Ransomware Group: CLOP

VICTIM NAME: WHEELS[.]COM

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CLOP Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page regarding WHEELS.COM, an automotive services company based in Canada that specializes in transportation and logistics, was discovered on February 27, 2025. WHEELS.COM is recognized for its expertise in fleet management, offering a variety of services aimed at optimizing vehicle leasing, fleet management, and driver support. Their focus lies in providing businesses with technology-driven solutions and expert guidance to enhance fleet operations while prioritizing the safety and satisfaction of drivers. The company serves multiple sectors, including pharmaceutical, infrastructure, and food & beverage industries.

The published date of the leak aligns with the discovery date, indicating a recent compromise. While the page does not specify the exact details of the data compromise, mention of the group associated with the attack being ‘Clop’ raises concerns regarding the potential severity of the leak. There are no explicit download links or screenshots included in the data provided, which suggests that while sensitive information may be exposed, it is not accessible through the current report. Given the nature of the services offered by WHEELS.COM, the breach could have implications for the various sectors relying on their fleet management services.