Ransomware.live listed Leafwell as a victim of the Direwolf ransomware group on August 11, 2026, with an attack timestamp on that date. The listing is not an official company or regulator notification. Research did not identify a public confirmation from Leafwell, a state attorney general, HHS, or another regulator. The available report does not state how many Leafwell individuals were affected or identify exposed data types. It does not confirm exposure of Social Security numbers, medical records, health insurance information, financial records, or payment-card data. The scope of the incident and any consumer notification remain unknown, and further details may emerge after the reported August 11, 2026 attack.