2026 National Kidney Registry — DireWolf leak-site claim; 253GB / donor-recipient PHI alleged (unverified)
Data compromised
Actor claims 253GB / ~180k files across eight datasets incl. donor medical files (~15k) and recipient records (~25k); alleged SSN/DOB/medical history/imaging/HLA/financial proofs/contacts (unverified; no samples)
Technical writeup
Unverified ransomware leak-site claim — DataBreaches.net August 26, 2026. DireWolf listed the US National Kidney Registry, claiming 253GB comprising ~180,000 documents across eight datasets, including alleged donor medical information (~15,050 files) and transplant recipient records (~24,791 files), plus “SSN, DOB, full medical history, imaging, HLA typing, financial proofs, and personal contact details.” DireWolf told DBN it had not disrupted operations and had received no reply; DBN likewise received no NKR response and noted no screenshots/samples. Countdown clock for contact remained active at indexing. recordsAffected 0 (no attested person census; file counts unverified); companyConfirmed false.
Root cause
Unverified DireWolf ransomware/extortion listing (DBN Aug 26, 2026); no samples; NKR had not replied at indexing