Back to Victim Disclosures

Volkswagen Group

stormousransomware group
May 31, 2025

May 31, 2025

User account data (partially hidden emails) Authentication tokens (OAuth tokens, JWT tokens) Login links for internal systems (e.g., https://identity.vwgroup.io) Session cookies (JSESSIONID and others) identity and access information (scopes such as email, profile, vin, phone, etc.) Authentication and access control details (redirect_uri, state, nonce)

Organization Details

Organization

Volkswagen Group

Domain

volkswagen-group.com

Country

🇩🇪 DE

Industry Sector

Manufacturing

https://volkswagen-group.com

Leak Data

Published

May 31, 2025

Discovered

May 31, 2025

Data Types
CredentialsEmployee recordsSource codeNone mentioned
GDPR
Leak URL
http://6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion/vwg-connect.com/CarNet-Part1.log
Site OfflineLast scanned 7h ago

Threat Group

stormous

ransomware group

View full group profile →

Quick Facts

Country🇩🇪 DE
SectorManufacturing
PublishedMay 31, 2025