ZeroHour

wallstreet

ransomware group · aka WallStreet · unknown · active since 2026-06-22 (first leak-site post tracked by this dashboard; earlier public activity unknown)

Victims · 7d
3▲1 vs prev. week
Victims · 30d
8active targets
Victims · 90d
15
All-time (tracked)
15since 2026-06-22
Last post
09-10 16:36UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

WallStreet is a ransomware and data-extortion group that publishes victims on a dedicated leak site. This dashboard first tracked the group on 2026-06-22 and has since recorded 12 listed victims, with ongoing activity including 1 victim in the last 7 days and 5 in the last 30 days (last post 2026-09-03). The victim profile skews toward small and mid-sized organizations, including rural and county hospitals, municipal and public-safety entities, education services, and manufacturing/automotive companies. Widely reported vendor attribution, affiliate relationships, and the group's country of origin are unknown, and it is not publicly confirmed whether the operation involves encryption or is extortion-led. Defenders should treat it as an active, relatively low-volume extortion operation with a demonstrated focus on public-sector and healthcare-adjacent victims.

Tactics & tooling
  • Publishes victim names and extortion claims on a dedicated leak site
  • Extortion-led victim set; whether encryption is consistently deployed is not publicly confirmed
  • Concentrates on small and mid-sized organizations, including rural/critical-access hospitals
  • Repeatedly targets municipal, county, and public-safety entities (e.g., city governments and police departments)
  • Victims span healthcare, education services, manufacturing/automotive, grocery/retail, and mining/materials
  • Ransom demands and victim payment details unknown; no public blockchain-analytics reporting located
Targeted sectors
HealthcareLocal governmentPublic safetyEducation servicesManufacturing/AutomotiveGrocery/RetailMining/Industrial materials
Notable public victims

America's Food Basket (grocery retailer), Ormond Beach, Florida (municipality), Cedar County Memorial Hospital, Baraga County Memorial Hospital (rural hospital), Edgewood Police Department (law enforcement), Total Education Solutions (education services provider), T.RAD North America (automotive parts supplier), Gold Standard Automotive, Black Hills Bentonite (industrial minerals/mining), Omax Autos (automotive components manufacturer)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
NcbChurch · 5d agoNew Covenant Believers’ Church is a faith-based ministry focused on spiritual, emotional, and mental growth through God’s Word
On Demand Occupational Medicine · 5d agoOn Demand Occupational Medicine provides occupational health, drug testing, workplace safety, and employee wellness services in Austintown, Ohio.
Goldston Oil Corporation · 5d agoGoldston Oil Corporation is a Houston-based oil and gas exploration and production company operating in Texas and Louisiana
America’s Food Basket · 12d agoAmerica’s Food Basket is a U.S. cooperative grocery-store network. Its site, afbasket.com, provides store locations, weekly ads, online shopping, delivery, recipes, and job listings. It operates under the America’s Food Basket and Ideal Food Basket names.
Ormond Beach Florida · 13d agoOrmond Beach, Florida, is a scenic coastal city just north of Daytona Beach, known for its beaches, relaxed atmosphere, historic charm, and outdoor activities.
Total Education Solutions · 14d agoTES IDEA provides personalized educational, therapeutic, and developmental solutions that help students, families, and schools achieve better outcomes.
Cedar County Memorial Hospital · 15d agoCedar County Memorial Hospital is a community hospital providing emergency, inpatient, outpatient, diagnostic, surgical, and rehabilitation services.
Andover · 16d agoThe Town of Andover, Massachusetts, is a municipal government organization that provides public services, administration, community programs, education resources, infrastructure support, and civic information to residents and businesses in Andover.
T.RAD North America · Aug 10, 2026T.RAD North America (tradna.com) is a Hopkinsville, Kentucky-based manufacturer focused on heat exchangers for thermal-management applications such as vehicle powertrains, HVAC/architectural systems, and emerging technologies like battery and fuel-cell cooling.
Black Hills Bentonite · Aug 10, 2026Black Hills Bentonite LLC (bhbentonite.com) is a Wyoming-based producer of high-quality sodium bentonite, along with lignite-related products, supplying global industrial and commercial uses such as drilling fluids, environmental/civil engineering sealing, absorbents (including cat litter), and metal casting/foundry applications
Gold Standard Automotive · Jul 5, 2026Gold Standard Automotive Network administers vehicle service contracts sold through dealerships, offering coverage for repairs after your factory warranty ends, with claim approvals handled through the company.
Baraga County Memorial Hospital · Jul 5, 2026Baraga County Memorial Hospital is a critical access hospital serving Baraga County with emergency, surgery, imaging, rehab, and outpatient care.
Asisken · Jul 4, 2026Asisken (asisken.com) is a medical assistance/health insurance company offering prepaid medical coverage and member support services, with a hospital network in Ecuador (and Colombia).
Edgewood Police Department · Jul 4, 2026The Edgewood Police Department is part of the Pierce County Sheriff’s Department, providing public safety and law enforcement services for the city, including community-focused programs like its free Community Academy
Omax Autos · Jun 22, 2026OMAX Autos Limited is a leading manufacturer of sheet metal components, specializing in the production of auto and non-auto components.

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .