A ransomware group calling itself Direwolf claims to have carried out an attack on InfoFlo CRM, with the claim surfacing on the group’s dark-web leak site on or around August 19, 2026. This listing was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim has not been independently verified, and InfoFlo CRM has not issued any public confirmation of an incident. As with any post on a ransomware leak site, the claim should be treated as an unverified statement from a criminal group rather than an established fact.
What we know — and don’t
- A group calling itself Direwolf listed InfoFlo CRM on its leak site, with the claim dated August 19, 2026.
- InfoFlo CRM operates in the software/technology space, providing customer relationship management (CRM) tools, and is categorized here under the ‘other’ sector.
- The specific data types the group claims to have obtained have not been disclosed in the listing and have not been confirmed by any independent party.
- No regulator or official body has confirmed this incident, and InfoFlo CRM has not made a public statement addressing the claim as of this writing.
- Details such as the scope of any alleged access, the number of records involved, or whether customer data was affected remain unknown at this time.
What should you do if you have an account with this company?
- Change your password for your InfoFlo CRM account, and avoid reusing that password on other services.
- Enable two-factor authentication (2FA) on your account if it is available and not already active.
- Be alert for phishing emails or messages that reference InfoFlo CRM or claim to be from the company, especially those urging urgent action or requesting login credentials.
- Monitor your other accounts for unusual activity, particularly if you reuse passwords or contact information across services.
- Consider using a service like a service like Aura or LifeLock to help monitor for signs that your personal information is circulating or being misused.
- Keep an eye on official communications from InfoFlo CRM regarding this claim, as details may change as more information becomes available.
BreachLetter will update this page if InfoFlo CRM confirms this incident, if new details emerge, or if the matter is officially reported to regulators.