Skip to content
Leak-site post naming Wolfram Research, captured by ThreatCluster

Wolfram Research

direwolf

Ransomware leak-site victim intelligence

Data size
Approximately 2.5 TB after compression/packaging
Posted
Sep 4, 2026
Country
US
Industry
Technology

What was taken

Data Warehouse Briefing: Backups and source-code mirrors of Wolfram's internal production infrastructure including WA production master database, Data Repository, cloud data, CRM, and internal systems; full internal source mirrors.

Data categories
DatabasesSource codeEmailsContractsDevelopment AssetsOther
Leak site tags
Data WarehouseBackupsinternal production infrastructureStash/BitbucketJiraKeycloakCloud dataWolfram CloudWA/WAWRD
Sample files (15)
alpha.qb.gz
repo2.qb.gz
web_prd4.qb.gz
sugarcrm_prd1.xbstream.gz
cloud_prd2.qb.gz
pg10base/ (extracted PGDATA)
wa_rt-2026-09-01.sql.xz
redb_2026-09-01.sql.xz
teamcity_2026-09-01.sql.xz
emailer_2026-09-01.sql.xz
cv sdb_2026-09-01.sql.xz
d octracker_2026-09-01.sql.xz
bitwarden_2026-09-01.sql.xz
keycloak_2026-09-01.sql.xz
mongodb_backup_colo6-mongodb-prd3_20260901.tar.gz

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture