Signalis
sign in--:--:--UTC
Threat actors

Wallstreet

☆ pin
Reports
51
First seen
Jun 26, 2026
Last seen
Oct 16, 2026
Motivation
Financial

Targeting

Sectors
Professional Services ×9Healthcare ×8Manufacturing ×7Other ×6Education ×3Retail & E-commerce ×2Government ×2Transport & Logistics ×2
Victim regions
×1
×18
United States×18
Sweden×14
Iran×1
El Salvador×1
Denmark×1
Saudi Arabia×1
Germany×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×51

Indicator values are available on Pro and via the API.

Recent reports

High

Wallstreet ransomware gang publishes Girl Scouts of Eastern Massachusetts as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Girl Scouts of Eastern Massachusetts as victim

ransomware.liveHigh

Wallstreet ransomware: TGM Manufacturing, Inc victim published

ransomware.liveHigh

Wallstreet ransomware gang publishes E-Z Pack Trucks as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes E-Z Pack Trucks as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Green Clinic as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Green Clinic as victim

ransomware.liveHigh

Wallstreet ransomware claims Ahlqvist & Almqvist Arkitekter AB

ransomware.liveHigh

Wallstreet ransomware claims Ahlqvist & Almqvist Arkitekter AB

ransomware.liveHigh

Wallstreet ransomware group claims Englunds Konsultbyrå AB victim

ransomware.liveHigh

Wallstreet ransomware publishes Englunds Konsultbyrå AB as victim

ransomware.liveHigh

Wallstreet ransomware gang claims Spectrum Arkitekter AB as victim

ransomware.liveMedium

Wallstreet ransomware claims Vendus Sweden AB victim

ransomware.liveHigh

Wallstreet ransomware claims Fab Support AB as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Fab Support AB as victim

ransomware.liveHigh

Wallstreet publishes Byrån för Arkitektur och Urbanism as ransomware victim

ransomware.liveMedium

Wallstreet ransomware gang publishes Byrån för Arkitektur och Urbanism

ransomware.liveHigh

Wallstreet ransomware gang publishes Briab Group AB as victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Briab Group AB as victim

ransomware.liveHigh

Wallstreet ransomware claims Danviks Hospital victim

ransomware.liveHigh

Wallstreet ransomware claims Brunnberg & Forshed Arkitektkontor

ransomware.liveHigh

Wallstreet ransomware publishes Mantum Holding AB as victim

ransomware.liveHigh

Wallstreet ransomware publishes Lambertinum Seniorenwohnanlage as victim

ransomware.liveHigh

Wallstreet ransomware claims St. Francis Healthcare Systems of Hawaii

ransomware.liveHigh

Wallstreet ransomware gang claims World Cup 2034 stadium contractor breach

ransomware.liveHigh

Wallstreet ransomware gang publishes Tronex A/S as new victim

ransomware.liveHigh

Wallstreet ransomware gang publishes Gibson Area Hospital & Health Services as victim

ransomware.liveHigh

Wallstreet ransomware gang claims new victim: Tobin & Company

ransomware.liveHigh

Wallstreet ransomware gang publishes Ar Valve Resources as victim

ransomware.liveHigh

Wallstreet ransomware group claims GTFM as new victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans