Ransomware.live listed Lightcast as a US victim of the Direwolf ransomware group. The listing identifies Lightcast as a human resources software company and gives an attack timestamp of September 7, 2026. The report has not been independently confirmed by Lightcast or a government regulator in the sources reviewed.
The sources reviewed do not disclose the number of affected individuals, the specific information involved, or whether Social Security numbers, medical information, or financial information were exposed. No official consumer notification, regulator filing, or public litigation record was identified. Further details about the incident and any affected individuals remain unknown.