Ransomware.live listed Delek US as a victim of an alleged Helix ransomware attack dated August 19, 2026. The listing stated that Delek US was “live” and described staged release timing for the alleged stolen data. No company statement, regulator filing, or official breach notification confirming the incident was identified in the consulted sources.
The number of affected individuals and the types of information involved, including whether Social Security numbers, medical information, or financial information were exposed, have not been publicly confirmed. No affected states or consumer notification date were identified. The available information may change if Delek US or a regulator later publishes additional details.