Ransomware group stormous hits Wizz Air
Wizz Air — a transportation/logistics target operating in HU has been listed by the stormous ransomware group on 2025-04-30. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Wizz Air |
|---|---|
| Threat Group | stormous |
| Summary | Wizz Air, a transportation/logistics organization in Hungary, was listed by the stormous ransomware group on its leak site on 2025-05-02. |
| Date of Breach | 2025-04-30 |
| Discovery Date | 2025-05-02 |
| Region | HU |
| Target Domain | wizzair.com |
| Business Sector | Transportation/Logistics |
| Severity | MEDIUM |
Claim by stormous
The response stated: "Wizz Air has strong security systems in place, designed to protect the sensitive data of our valued customers and partners." But I would like to know what guarantees you actually offer your customers and others, because this company clearly seems unaware of what’s going on. The breach was published nearly a month ago, and the data has been widely circulated and used. It has also been verified, and it is indeed valid data linked to your employees. Does the company not have any monitoring system? Or perhaps there have been numerous reports of major fraud incidents committed under your name. So, your denial of the breach — which dates back to a month ago — appears more like an attempt to mislead your customers and partners.
Posted by the stormous threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
wizzair.com
Leak post (onion / Tor)
http://6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion/
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

