- Victims · 7d3+3 vs prior week
- Victims · 30d5
- Victims · 90d67
- All-time (tracked)142since 2025-05-27
- Last post11-01 14:24UTC
- Estimated earnings—public reporting
DireWolf is a ransomware and data-extortion crew first described in public vendor reporting in 2025. It pressures victims by stealing data, encrypting systems, and listing organizations on a dedicated leak site. Targeting looks opportunistic across regions and industries rather than confined to one sector. This dashboard records 63 leak-site listings since 2026-08-10 (4 in 30 days, 1 in 7 days), with the latest post on 2026-10-04. Geographic origin, any affiliate model, and confirmed ransom totals are unknown in open sources.
- Double extortion: data theft plus encryption, with publication threatened if unpaid
- Dedicated leak site used to name victims and post claimed stolen data
- Ransom pressure tied to non-publication and recovery, amounts not reliably published
- Broad, opportunistic victim selection across countries and organization sizes
- Initial access vector and intrusion tooling not consistently documented in public reporting (unknown)
- No specific CVE publicly and consistently tied to DireWolf intrusions
Port of Tanjung Pelepas, Hazel Health, Little Otter, eAssist Dental Solutions, Precision Vehicle Logistics, Lightcast, Softruck, RelyComply AML Platform
No public figure.
Leak-site victims
142 posts · newest first| Victim | Discovered | Details |
|---|---|---|
| My Cloud Grocer | · 5h ago | — |
| USClaims | · 3d ago | — |
| GRUPO PETROIL | · 5d ago | — |
| Interseguro | · 19d ago | — |
| Softruck | · 28d ago | — |
| Little Otter | · Sep 14, 2026 | — |
| Hazel Health | · Sep 14, 2026 | — |
| Port of Tanjung Pelepas | · Sep 11, 2026 | — |
| RelyComply AML Platform | · Sep 9, 2026 | — |
| Sales Boomerang | · Sep 9, 2026 | — |
| EMS1R | · Sep 8, 2026 | — |
| TrainMe | · Sep 7, 2026 | — |
| Precision Vehicle Logistics | · Sep 7, 2026 | — |
| Lightcast | · Sep 7, 2026 | — |
| Semper Laser | · Sep 7, 2026 | — |
| eAssist Dental Solutions | · Sep 6, 2026 | — |
| Mission Pet Health | · Sep 6, 2026 | — |
| myLaurel | · Sep 6, 2026 | — |
| Wolfram Research | · Sep 4, 2026 | — |
| Cartrack Holdings | · Sep 2, 2026 | — |
| PTT Oil and Retail Business | · Sep 2, 2026 | — |
| Honeycomb Programs Inc | · Sep 1, 2026 | — |
| PT Intraco Penta Tbk | · Sep 1, 2026 | — |
| Oportunidados | · Sep 1, 2026 | — |
| THQ Nordic | · Aug 30, 2026 | — |
| Erdem Hospital | · Aug 30, 2026 | — |
| Hospital Clnico Universidad de Chile | · Aug 30, 2026 | — |
| National Kidney Registry | · Aug 25, 2026 | — |
| Studio Legale ESE | · Aug 25, 2026 | — |
| NorthStar | · Aug 21, 2026 | — |
| Aztec Software | · Aug 21, 2026 | — |
| The Revel Collective | · Aug 21, 2026 | — |
| ProSim Aviation Research | · Aug 21, 2026 | — |
| Authenticate Information Systems | · Aug 21, 2026 | — |
| Diaco Global | · Aug 21, 2026 | — |
| iSON XPERIENCES | · Aug 21, 2026 | — |
| Deer Creek-Mackinaw CUSD | · Aug 21, 2026 | — |
| Allstar Industries | · Aug 21, 2026 | — |
| HP Carriers | · Aug 21, 2026 | — |
| MCT Group of Companies | · Aug 21, 2026 | — |
| Reviso Cloud Accounting Limited | · Aug 21, 2026 | — |
| Studee | · Aug 21, 2026 | — |
| Photon Health, Inc. | · Aug 19, 2026 | — |
| InfoFlo CRM | · Aug 19, 2026 | — |
| PayUp | · Aug 19, 2026 | — |
| Lifesum | · Aug 19, 2026 | — |
| Mighty Kingdom | · Aug 17, 2026 | — |
| Eva AI Limited | · Aug 17, 2026 | — |
| Arizona State University (ASU) | · Aug 17, 2026 | — |
| Wishfully Studios | · Aug 17, 2026 | — |
In the news
AllNo articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .