Skip to content
← All breaches
Threat actor tracker 139 incidents tracked

Direwolf — every breach we're tracking

Running log of incidents attributed to or claimed by Direwolf in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked139
Latest activitySeptember 14, 2026
TypeRansomware / extortion

Groups like Direwolf steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 139 incidents we've attributed to Direwolf.

high September 14, 2026

Little Otter Listed by Direwolf Ransomware Group

Little Otter was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 14, 2026

Hazel Health Listed by Direwolf Ransomware Group

Hazel Health was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 11, 2026

Port of Tanjung Pelepas Listed by Direwolf Ransomware Group

Marine Shipping & Transportation…

high September 09, 2026

RelyComply AML Platform Listed by Direwolf Ransomware Group

RelyComply AML Platform was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 08, 2026

Sales Boomerang Listed by Direwolf Ransomware Group

Accounting/Finance Software, Analytics & Performance Software, Customer Relationship Management…

high September 08, 2026

Ems1R Listed by Direwolf Ransomware Group

Ems1R was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 07, 2026

Semper Laser Listed by Direwolf Ransomware Group

Semper Laser was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 07, 2026

TrainMe Listed by Direwolf Ransomware Group

TrainMe was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 07, 2026

Precision Vehicle Logistics Listed by Direwolf Ransomware Group

Precision Vehicle Logistics was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 07, 2026

Lightcast Listed by Direwolf Ransomware Group

Lightcast was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 06, 2026

eAssist Dental Solutions Listed by Direwolf Ransomware Group

eAssist Dental Solutions was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 06, 2026

myLaurel Listed by Direwolf Ransomware Group

myLaurel was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 05, 2026

Mission Pet Health Listed by Direwolf Ransomware Group

Healthcare Services…

high September 04, 2026

Wolfram Research Listed by Direwolf Ransomware Group

Wolfram Research was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

PTT Oil and Retail Business Listed by Direwolf Ransomware Group

PTT Oil and Retail Business was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 02, 2026

Cartrack Holdings Listed by Direwolf Ransomware Group

Cartrack Holdings was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 01, 2026

Honeycomb Programs Inc Listed by Direwolf Ransomware Group

Honeycomb Programs Inc was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 01, 2026

PT Intraco Penta Tbk Listed by Direwolf Ransomware Group

PT Intraco Penta Tbk was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high September 01, 2026

Oportunidados Listed by Direwolf Ransomware Group

Oportunidados was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 30, 2026

THQ Nordic Listed by Direwolf Ransomware Group

THQ Nordic was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 30, 2026

Hospital Clnico Universidad de Chile Listed by Direwolf Ransomware Group

Hospital Clnico Universidad de Chile was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 30, 2026

Erdem Hospital Listed by Direwolf Ransomware Group

Erdem Hospital was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 25, 2026

National Kidney Registry Listed by Direwolf Ransomware Group

National Kidney Registry was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 25, 2026

Studio Legale ESE Listed by Direwolf Ransomware Group

Studio Legale ESE was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 21, 2026

MCT Group of Companies Listed by Direwolf Ransomware Group

Building Materials…

high August 21, 2026

Diaco Global Listed by Direwolf Ransomware Group

Jewelry & Watch Retail…

high August 21, 2026

Deer Creek-Mackinaw CUSD Listed by Direwolf Ransomware Group

Education…

high August 21, 2026

ProSim Aviation Research Listed by Direwolf Ransomware Group

Engineering Software…

high August 21, 2026

Authenticate Information Systems Listed by Direwolf Ransomware Group

Authenticate Information Systems was listed on the direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 21, 2026

Allstar Industries Listed by Direwolf Ransomware Group

Business Services…

high August 21, 2026

The Revel Collective Listed by Direwolf Ransomware Group

Hospitality…

high August 21, 2026

Aztec Software Listed by Direwolf Ransomware Group

Engineering Software…

high August 21, 2026

NorthStar Listed by Direwolf Ransomware Group

Enterprise Resource Planning…

high August 21, 2026

Reviso Cloud Accounting Limited Listed by Direwolf Ransomware Group

Reviso Cloud Accounting Limited is a software company that provides cloud-based accounting solutions primarily targeting small and medium-si…

high August 21, 2026

iSON XPERIENCES Listed by Direwolf Ransomware Group

Business Services…

high August 21, 2026

Studee Listed by Direwolf Ransomware Group

Studee is an online platform that helps international students find and apply to universities around the world. Operating in the education t…

high August 21, 2026

HP Carriers Listed by Direwolf Ransomware Group

HP Carriers was listed on the direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 19, 2026

PayUp Listed by Direwolf Ransomware Group

PayUp was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 19, 2026

Lifesum Listed by Direwolf Ransomware Group

Lifesum was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 19, 2026

InfoFlo CRM Listed by Direwolf Ransomware Group

InfoFlo CRM was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 19, 2026

Photon Health, Inc. Listed by Direwolf Ransomware Group

Photon Health, Inc. was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 17, 2026

Arizona State University (ASU) Listed by Direwolf Ransomware Group

Arizona State University (ASU) was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 17, 2026

Eva AI Limited Listed by Direwolf Ransomware Group

Eva AI Limited was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 17, 2026

Wishfully Studios Listed by Direwolf Ransomware Group

Wishfully Studios was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 17, 2026

Mighty Kingdom Listed by Direwolf Ransomware Group

Mighty Kingdom was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

DXS International Listed by Direwolf Ransomware Group

Healthcare…

high August 15, 2026

Totvs Listed by Direwolf Ransomware Group

Business Services…

high August 15, 2026

DXS International Listed by Direwolf Ransomware Group

DXS International was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

Totvs Listed by Direwolf Ransomware Group

Totvs was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

PayrHealth Listed by Direwolf Ransomware Group

PayrHealth was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

DodoPayments Listed by Direwolf Ransomware Group

DodoPayments was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

Colla Health Listed by Direwolf Ransomware Group

Colla Health was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 15, 2026

AAM:HOA Management Listed by Direwolf Ransomware Group

AAM:HOA Management was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 11, 2026

Leafwell Listed by Direwolf Ransomware Group

Hospitals & Physicians Clinics…

high August 10, 2026

Health Carousel Listed by Direwolf Ransomware Group

Health Carousel was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 10, 2026

Chat Jurídico Listed by Direwolf Ransomware Group

Law Firms & Legal Services…

high August 10, 2026

Quironsalud Listed by Direwolf Ransomware Group

Quironsalud was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 10, 2026

Fondo Listed by Direwolf Ransomware Group

Fondo was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 10, 2026

Swyft Inc. Listed by Direwolf Ransomware Group

Swyft Inc. was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

high August 10, 2026

Osmo Wallet Listed by Direwolf Ransomware Group

Osmo Wallet was listed on the Direwolf ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.