Direwolf Claims Ransomware Incident at Colla Health
Summary
A ransomware.live post attributes a claim about Colla Health to direwolf. The post alleges operational disruption and potential exposure of sensitive data, but says the claims are unconfirmed.
Key points
- The named victim is Colla Health, a US healthcare organization.
- The post attributes the ransomware claim to direwolf and cites the actor’s post.
- The post alleges operational disruption and potential exposure of sensitive data; these claims are unconfirmed.
- The post says it would share an official statement from Colla Health if available.
Article Details
- Victim
- Colla Health
- Claim Date
- 2026-08-15
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Unconfirmed; the source reports potential exposure of sensitive data but does not confirm exfiltration.
- Exfiltrated Data
- Sensitive data; potential exposure is reported, but the data is not specified or confirmed as exfiltrated.
- Leak Status
- The group’s claim is linked to its onion-site article; publication or authenticity of victim data is not confirmed.