Ransomware.live listed Merge, which uses the domain merge.money, as a victim tied to the direwolf group with an attack date of 2026-08-10. The available ingest labels the incident as financial, but no public breach notice, regulator filing, or company statement was found in the sources consulted.
No entity-level affected count, state list, consumer notice date, or regulator notice date was available in the provided sources. The record also did not identify any confirmed exposure of SSNs or medical information.
This information is based on a third-party incident listing, and details may change if Merge later discloses more about the event.