The direwolf ransomware group listed EMS1R on its data leak site on 2026-09-08. Country: US Domains named: ems1r.com Claim as published on the leak site: Corporate Wellness Services