Toast

Toast is an organization that was identified as a target in the Cl0p ransomware group's campaign exploiting a vulnerability in PTC’s Windchill product lifecycle management platform. The campaign was publicly disclosed on July 1, 2026, and affected more than forty named organizations. Toast was specifically listed among those targets alongside companies such as Shell, Philips, Fiserv, Zebra Technologies, Ingersoll Rand, Mindray and Largan Precision. The attackers deployed a custom web shell that gave them full access to victims’ data, including databases, project files, backups, photographs, engineering documents, blueprints, diagrams, logs and other corporate files. The scope of data exfiltrated varied from one gigabyte to several terabytes per affected organization.

In response to the allegations, Toast stated that it is aware of the claims and is conducting an investigation into the incident. Like many of the other named targets, Toast has not confirmed that a significant breach occurred as a result of the attack. Reports indicate that a number of the affected companies, including Toast, have reportedly refused to pay any ransom demanded by the Cl0p group. The incident highlights the broader risk posed by vulnerabilities in widely used industrial software platforms such as PTC Windchill. As of the latest public statements, Toast continues to monitor the situation and has not disclosed further details about potential impacts or remedial actions taken.