THREAT OPS › Threat News › [direwolf] PayrHealth posted to leak site
[direwolf] PayrHealth posted to leak site
Ransomware group: direwolf Victim: PayrHealth Victim website: payrhealth.com Sector: Healthcare Country: US Discovered: 2026-08-15T20:24:18.823265+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/article/86 Description: Healthcare Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- payrhealth.comdomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/article/86url