vsstransportationgroup.com
cactusThis record tracks a ransomware attack claimed by the cactus group against vsstransportationgroup.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Transportation.<br><br>“VSS Transportation Group provides quality service and complete customer satisfaction. We are constantly working on improving our communication and capabilities to better serve you. Please feel free to leave any comments, questions, or concerns you may have regarding our services and your overall experience with VSS Transportation Group.”<br><br>Website: <a href="https://www.vsstransportationgroup.com/">https://www.vsstransportationgroup.com/</a><br><br>Revenue : $54.5M<br><br>Address: 1325 W Belt Line Rd, Carrollton, Texas, 75006, United States<br><br>Phone Number: (469) 568-6380<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/VSSCARRIERS/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/VSSCARRIERS/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/VSSCARRIERS/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/VSSCARRIERS/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal Identifiable information, corporate confidential data, employees personal files\docs, financial data\payroll, corporate correspondence, database backups etc.</p><p><img src="/uploads/BELL_DAVID_DL_2030_updated_address_front_a8ea8bd20f.png" alt="BELL DAVID DL 2030.updated address front.png"><img src="/uploads/BARRETT_ROBERT_DL_2032_FRONT_98d98c38ff.png" alt="BARRETT ROBERT DL 2032 FRONT.png"><img src="/uploads/ALLEMAN_RONALD_DL_2027_ea8a2e6d06.png" alt="ALLEMAN, RONALD DL 2027.png"><img src="/uploads/DRIVER_LICENSE_48f3e25b9d.png" alt="DRIVER LICENSE.png"><img src="/uploads/BAIRD_JOHN_DL_2025_c6e4b44eea.png" alt="BAIRD JOHN DL 2025.png"></p>
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.