
Werewolves
Data as of August 16, 2026.
What industries Werewolves targets
Sector identified for 13 of 20 victims.
| Financial Services | 3 | |
| Hospitality | 3 | |
| Manufacturing | 2 | |
| Technology | 2 | |
| Telecommunications | 1 | |
| Construction | 1 | |
| Retail | 1 |
Where the victims are located
Country identified for 16 of 20 victims.
| Russia | 14 | |
| France | 1 | |
| United States | 1 |
Every Werewolves victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Vsexshop.ru vsexshop.ru | Not identified | Russia | Mar 12, 2024 |
| David\'s Bridal davidsbridal.com | Retail | Not identified | Feb 16, 2024 |
| acac acac.com | Not identified | Not identified | Dec 21, 2023 |
| ATOL atol.ru | Manufacturing | Russia | Dec 21, 2023 |
| Audit-Expert auditexpertnn.ru | Financial Services | Russia | Dec 21, 2023 |
| Aurora avrora24.ru | Not identified | Russia | Dec 21, 2023 |
| CarMoney carmoney.ru | Not identified | Russia | Dec 21, 2023 |
| CROC croc.ru | Technology | Russia | Dec 21, 2023 |
| Emprint emprint.com | Not identified | Not identified | Dec 21, 2023 |
| Gas Transport gaztranscom.ru | Not identified | Russia | Dec 21, 2023 |
| Amaks Hotels & Resorts amaks-hotels.ru | Hospitality | Russia | Dec 21, 2023 |
| Kailos kailos.ru | Not identified | Russia | Dec 21, 2023 |
| Amaks City Hotel amaks-hotels.ru | Hospitality | Russia | Dec 21, 2023 |
| La Poste Mobile lapostemobile.fr | Telecommunications | France | Dec 21, 2023 |
| Maritime Bank maritimebank.com | Financial Services | Not identified | Dec 21, 2023 |
| Promproekt promproektspb.ru | Construction | Russia | Dec 21, 2023 |
| Room Hotel roomhotel-sochi.ru | Hospitality | Russia | Dec 21, 2023 |
| JSCB FORA-BANK forabank.ru | Financial Services | Russia | Jan 29, 2023 |
| Solve Industrial Motion Group solveindustrial.com | Manufacturing | United States | Jan 29, 2023 |
| VAS Experts vasexperts.ru | Technology | Russia | Jan 29, 2023 |
Browse recent data breaches for more.
Werewolves leak sites
Addresses we've seen Werewolves publish victims from. Any .onion address needs the Tor Browser.
werewolves.proweerwolven.biz
Werewolves questions
Is Werewolves still active?
Not for over a year. The last victim we recorded was March 12, 2024. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has Werewolves claimed?
Werewolves has named 20 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Werewolves first appear?
The first victim we recorded for Werewolves was posted on January 29, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Werewolves target?
Financial Services accounts for the most victims we can classify, with 3. Hospitality follows at 3. We could identify a sector for 13 of 20 victims, so treat this as the shape of the targeting rather than a full census.
Has Werewolves already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.