Company in Transportation/Logistics

win.devman📍 France (FR)📅 December 17, 2025

Attack Intelligence

Company in Transportation/Logistics was compromised in a ransomware attack attributed to win.devman in December 2025. The organization, operating in the Transportation/Logistics sector in France, was added to the group's data leak site as part of an extortion campaign.

win.devman operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Quick Facts

CountryFrance (FR)

SectorTransportation/Logistics

Attack DateDec 17, 2025

Threat Group

win.devman

Motivation: financial

View group profile →

External Links

Google (news) Search CTI.watch

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.

← All Victims·Threat Actors