A ransomware group calling itself DireWolf claims to have carried out an attack on Swyft Inc., with the claim surfacing on the group’s dark web leak site on August 10, 2026. This listing was tracked by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, the claim has not been independently verified, and Swyft Inc. has not issued any public confirmation of an incident.
What we know — and don’t
- A group calling itself DireWolf listed Swyft Inc. on its leak site with a claimed date of August 10, 2026.
- Swyft Inc. is categorized here under the ‘other’ sector, as no more specific industry classification has been provided.
- The specific types of data allegedly accessed — such as personal, financial, or operational records — have not been disclosed by the group or confirmed by any party.
- No regulator, law enforcement agency, or the company itself has confirmed that an attack occurred.
What should you do if you have an account with this company?
- Change your password for any account with Swyft Inc., and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, ideally using an authenticator app rather than SMS.
- Be cautious of unexpected emails, texts, or calls claiming to be from Swyft Inc., especially those asking you to click links or verify account details.
- Monitor your bank and card statements for unfamiliar activity in the coming weeks.
- Consider using an identity monitoring service like a service like Aura or LifeLock to get alerted early if your personal information turns up in places it shouldn’t.
BreachLetter will update this article if Swyft Inc. confirms an incident, if the claim is withdrawn or disproven, or if the matter is reported to regulators.