A ransomware group calling itself Direwolf claims to have obtained data from Lightcast, according to a listing on the group’s dark-web leak site dated September 7, 2026. This claim has been tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites, and has not been independently verified. Lightcast has not issued any public statement confirming or denying the claim, and no regulator has confirmed an incident at this time.
What we know — and don’t
- A group calling itself Direwolf posted a claim referencing Lightcast on its leak site, dated September 7, 2026.
- Lightcast operates in the ‘other’ sector; it is not a bank, law firm, school, retailer, or healthcare provider.
- The specific data types the group claims to have obtained have not been disclosed or confirmed by any party.
- No confirmation has come from Lightcast, from an independent forensic investigation, or from any regulatory body.
- As with all leak-site postings, the claim could be exaggerated, fabricated, or entirely accurate — there is currently no way to independently verify it.
What should you do if you have an account with this company?
- Change your password for any account associated with Lightcast, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, using an authenticator app rather than SMS if possible.
- Be alert to phishing emails or texts that reference Lightcast, an alleged breach, or requests to ‘verify’ your account — attackers often exploit these claims before any facts are confirmed.
- Monitor your financial statements and any linked accounts for unfamiliar activity.
- Consider signing up for an identity monitoring service like a service like Aura or LifeLock to get alerted if your personal information turns up in places it shouldn’t.
- Keep records of any suspicious communications in case they are needed later.
BreachLetter will update this page if Lightcast confirms an incident, if new details emerge from a credible investigation, or if the matter is officially reported to regulators.