Ransomware: direwolf claims DodoPayments (IN) — Financial Services

On August 15, 2026, the ransomware group Direwolf publicly claimed responsibility for an attack on DodoPayments, an Indian financial services provider. The claim was published on the ransomware.live data leak site, which tracks such incidents. This is a notification of a potential data breach, not a regulatory ruling, but it triggers immediate compliance obligations under frameworks like GDPR, India’s DPDP Act, and sector-specific financial regulations.

The primary affected organization is DodoPayments, but the impact extends to its business clients, partner banks, and any individuals whose payment data may have been compromised. Given that DodoPayments operates in the financial sector, the breach could involve sensitive personal data, transaction records, and cardholder information. Regulators in India and any jurisdiction where DodoPayments operates will likely scrutinize the incident, and third-party vendors using its services must assess their own exposure.

Compliance teams should first verify whether their organization has any data-sharing relationship with DodoPayments. If so, they must review contractual breach notification clauses and report the incident to their own data protection authorities if required. Next, assess whether any of your data was involved by contacting DodoPayments directly for a disclosure statement. Finally, update your incident response playbook to include ransomware-specific steps, such as preserving forensic evidence and preparing for potential extortion-related data leaks. Do not pay the ransom, and coordinate with legal counsel before any public statements.