Ransomware Group intelligence

Direwolf

Active

Track Direwolf with 141 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 141 Known published victims in this dataset
First discovered 2025-05-27 Earliest victim discovery date
Last discovered 2026-08-30 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 32 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Direwolf is tracked by Breach House as a ransomware group with 141 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 15m ago direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion

    Top Activity Sectors (16)

    Victims (141)

    Search, filter and paginate the victim timeline for Direwolf. Showing 1–100 of 141.

    Type Target Discovered Country Business Category Intel Link
    Ransomware THQ Nordic id32314 View details Sweden IT
    Ransomware THQ Nordic id32314 View details Sweden IT
    Ransomware Erdem Hospital id32315 View details Türkiye Manufacturing / Engineering
    Ransomware Erdem Hospital id32315 View details Türkiye Manufacturing / Engineering
    Ransomware Hospital Clnico Universidad de Chile id32316 View details Chile Healthcare / Pharma
    Ransomware Hospital Clnico Universidad de Chile id32316 View details Chile Healthcare / Pharma
    Ransomware National Kidney Registry id32119 View details United States Healthcare / Pharma
    Ransomware National Kidney Registry id32119 View details United States Healthcare / Pharma
    Ransomware Studio Legale ESE id32120 View details Italy Finance / Legal / Insurance
    Ransomware Studio Legale ESE id32120 View details Italy Finance / Legal / Insurance
    Ransomware NorthStar id31929 View details Canada
    Ransomware Aztec Software id31930 View details Mexico
    Ransomware The Revel Collective id31931 View details United States
    Ransomware ProSim Aviation Research id31932 View details France
    Ransomware ProSim Aviation Research id31932 View details Netherlands
    Ransomware Authenticate Information Systems id31933 View details United States
    Ransomware Diaco Global id31934 View details
    Ransomware iSON XPERIENCES id31935 View details Mexico
    Ransomware Deer Creek-Mackinaw CUSD id31936 View details United States
    Ransomware Allstar Industries id31937 View details United States
    Ransomware HP Carriers id31938 View details United States
    Ransomware MCT Group of Companies id31939 View details United Arab Emirates
    Ransomware Reviso Cloud Accounting Limited id31940 View details Denmark
    Ransomware Studee id31941 View details
    Ransomware Photon Health, Inc. id31917 View details United States
    Ransomware InfoFlo CRM id31918 View details United States
    Ransomware PayUp id31919 View details
    Ransomware Lifesum id31920 View details Sweden
    Ransomware Arizona State University (ASU) id31789 View details United States
    Ransomware Wishfully Studios id31790 View details Sweden
    Ransomware Mighty Kingdom id31792 View details Australia
    Ransomware Eva AI Limited id31793 View details United Kingdom
    Ransomware DodoPayments id31731 View details United Kingdom Finance / Legal / Insurance
    Ransomware DodoPayments id31741 View details India Finance / Legal / Insurance
    Ransomware AAM:HOA Management id31732 View details United States Finance / Legal / Insurance
    Ransomware AAM:HOA Management id31742 View details United States Finance / Legal / Insurance
    Ransomware TOTVS id31733 View details Brazil
    Ransomware TOTVS id31743 View details Brazil
    Ransomware Colla Health id31734 View details United States
    Ransomware Colla Health id31744 View details United States
    Ransomware PayrHealth id31735 View details United States
    Ransomware PayrHealth id31745 View details United States
    Ransomware DXS International id31736 View details United Kingdom
    Ransomware DXS International id31746 View details United Kingdom
    Ransomware Leafwell id31553 View details United States Healthcare / Pharma
    Ransomware Leafwell id31553 View details United States Healthcare / Pharma
    Ransomware BigSpark id31549 View details Anguilla IT
    Ransomware BigSpark id31549 View details Anguilla IT
    Ransomware Chat Jurídico id31547 View details Brazil Finance / Legal / Insurance
    Ransomware Chat Jurídico id31547 View details Brazil Finance / Legal / Insurance
    Ransomware Merge id31548 View details United States Finance / Legal / Insurance
    Ransomware Merge id31548 View details United States Finance / Legal / Insurance
    Ransomware Swyft Inc. id31544 View details United States Retail / E-commerce
    Ransomware Swyft Inc. id31544 View details United States Retail / E-commerce
    Ransomware AliveCor, Inc. id31536 View details United States Healthcare / Pharma
    Ransomware AliveCor, Inc. id31536 View details United States Healthcare / Pharma
    Ransomware Statista GmbH id31537 View details Germany IT
    Ransomware Statista GmbH id31537 View details Germany IT
    Ransomware Quironsalud id31538 View details Spain Healthcare / Pharma
    Ransomware Quironsalud id31538 View details Spain Healthcare / Pharma
    Ransomware Health Carousel id31539 View details Philippines Healthcare / Pharma
    Ransomware Health Carousel id31539 View details Philippines Healthcare / Pharma
    Ransomware Fondo id31540 View details Finance / Legal / Insurance
    Ransomware Fondo id31540 View details Finance / Legal / Insurance
    Ransomware Osmo Wallet id31541 View details United States Finance / Legal / Insurance
    Ransomware Osmo Wallet id31541 View details United States Finance / Legal / Insurance
    Ransomware Jewelex id29811 View details Cyprus Retail / E-commerce
    Ransomware Clínica Vida id29812 View details Brazil Healthcare / Pharma
    Ransomware Did Asia id29813 View details Thailand Manufacturing / Engineering
    Ransomware Nueva Pescanova Group id29814 View details Spain Agriculture / Food
    Ransomware Tepco-Group id25483 View details Japan Services
    Ransomware Perdana Petroleum Berhad id25482 View details Malaysia Energy
    Ransomware Chemsain Konsultant Sdn Bhd id25481 View details Malaysia Manufacturing / Engineering
    Ransomware Bauerfeind id25399 View details Germany Manufacturing / Engineering
    Ransomware Mohammad Omar Bin Haider Holding Group id25398 View details United Arab Emirates Services
    Ransomware Hydrodiseño id25280 View details Spain Manufacturing / Engineering
    Ransomware Bina Darulaman Berhad id25279 View details Malaysia Manufacturing / Engineering
    Ransomware PernelMedia id25278 View details France Communication / Marketing
    Ransomware KwikLedgers id25277 View details United States Finance / Legal / Insurance
    Ransomware Laurenzano Logistics id25276 View details United States Transportation / Travel / Logistics
    Ransomware Sunzen Biotech Berhad id25275 View details Malaysia IT
    Ransomware Varimed Medikal id25274 View details Türkiye Manufacturing / Engineering
    Ransomware Polaris Parks id24996 View details United States Construction / Real Estate
    Ransomware Ranger Investigation Guard id24995 View details Thailand Services
    Ransomware Office of Public Sector Anti-Corruption Commission id24994 View details Thailand Public Sector
    Ransomware Guan Chong Berhad id24993 View details Malaysia Hospitality / Food & Beverage / Tourism
    Ransomware Sanyang Motor id24992 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Adnan Sundra & Low id24991 View details Malaysia Finance / Legal / Insurance
    Ransomware K.M. Packaging id24249 View details Thailand Manufacturing / Engineering
    Ransomware MITACHI id24248 View details Japan Other
    Ransomware Kingsford Group id24247 View details Singapore Construction / Real Estate
    Ransomware Transpedrosa id24246 View details Brazil Transportation / Travel / Logistics
    Ransomware Clemar Assessoria e Logística em Comércio Internacional id24245 View details Brazil Services
    Ransomware Meinhardt Malaysia id24244 View details Malaysia Manufacturing / Engineering
    Ransomware Electricidad Panamericana id24243 View details Argentina Other
    Ransomware Coral id23849 View details United Kingdom Retail / E-commerce
    Ransomware Hyundai Nishat Motor id23848 View details Pakistan Communication / Marketing
    Ransomware YPC MALAYSIA id23847 View details Malaysia Other
    Ransomware Speed Inter Transport id23025 View details Thailand Transportation / Travel / Logistics
    Ransomware Miguel Veiga, Neiva Santos e Associados. id23024 View details Portugal Other