A ransomware group calling itself Direwolf has claimed, via a listing on its dark-web leak site, that it targeted Leafwell, with the claimed date given as August 11, 2026. This claim was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites, and has not been independently verified. Leafwell has not issued any public statement confirming a breach, and no regulator has confirmed the incident. As with all leak-site postings, the group’s claim should be treated as an unverified assertion by a criminal actor rather than established fact.
What we know — and don’t
- A group calling itself Direwolf listed Leafwell on its leak site, with a claimed attack date of August 11, 2026.
- Leafwell operates in the healthcare space, offering telehealth-related services; the exact nature of any systems allegedly involved has not been described.
- The specific types of data the group claims to have obtained have not been disclosed or confirmed by any party.
- Leafwell has not publicly confirmed that an incident occurred.
- No regulatory filing or breach notification tied to this claim has been reported at this time.
What should you do if you have an account with this company?
- Change your Leafwell account password, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) on your account if it is offered and not already active.
- Be cautious of unexpected emails, texts, or calls claiming to be from Leafwell, especially those asking you to click links or verify personal or health information — these could be phishing attempts.
- Monitor your financial and email accounts for unusual activity in the weeks ahead.
- Consider using an identity monitoring service such as a service like Aura or LifeLock to get alerted if your personal information appears in places it shouldn’t.
- Keep an eye on official communications from Leafwell for updates on this claim.
BreachLetter will update this page if Leafwell confirms this incident, if new details emerge from credible sources, or if the matter is officially reported to regulators.