Wallstreet

Active
25 victims named on the leak site
17 in the last 30 days
25 in the last 12 months
Jun 2026 first victim we recorded
Sep 30, 2026 most recent victim posted
1 leak site tracked

Data as of October 1, 2026.

Credential exposure before the attack

16% of Wallstreet victims whose domain we can identify (4 of 25) had employee credentials leak in the 12 months before Wallstreet named them as a victim.

We don't know whether any of these credentials were how Wallstreet gained initial access.

What industries Wallstreet targets

Sector identified for all 25 victims.

Manufacturing6
Healthcare6
Government3
Education3
Automotive1
Retail1
Energy1
Non-profit1

Where the victims are located

Country identified for 22 of 25 victims.

United States19
United Kingdom2
India1

Most recent Wallstreet victims

VictimSectorCountryPosted
Gibson Area Hospital & Health Services gibsonhospital.orgHealthcareUnited StatesSep 30, 2026
AR Valve Resources ar-resources.comManufacturingUnited KingdomSep 28, 2026
Beatus Cartons beatuscartons.co.ukManufacturingUnited KingdomSep 28, 2026
Breast Implant Center of Hawaii breastimplantcenterofhawaii.comHealthcareUnited StatesSep 28, 2026
GTFM gtfmllc.comConstructionUnited StatesSep 28, 2026
Tobin & Company tobinandco.comFinancial ServicesUnited StatesSep 28, 2026
Catholic University of El Salvador catolica.edu.svEducationNot identifiedSep 25, 2026
Prater, Ridley & Llamas - Attorneys at Law prater-ridleylaw.comLegalUnited StatesSep 25, 2026
Odyssey Charter School odysseyschools.comEducationUnited StatesSep 17, 2026
Roshd Sanat Niroo roshdsanatniroo.comManufacturingNot identifiedSep 17, 2026
Goldstone Oil & Gas goldstoneoilandgas.comEnergyUnited StatesSep 11, 2026
New Covenant Believers\' Church ncbchurch.orgNon-profitUnited StatesSep 11, 2026
On Demand Occupational Medicine ondemandoccupationalmedicine.comHealthcareUnited StatesSep 11, 2026
America’s Food Basket afbasket.comRetailUnited StatesSep 4, 2026
City of Ormond Beach ormondbeach.orgGovernmentUnited StatesSep 3, 2026
Total Education Solutions tesidea.comEducationUnited StatesSep 2, 2026
Cedar County Memorial Hospital cedarcomem.comHealthcareUnited StatesSep 1, 2026
Town of Andover andoverma.govGovernmentUnited StatesAug 31, 2026
Black Hills Bentonite bhbentonite.comManufacturingUnited StatesAug 11, 2026
T.RAD North America tradna.comManufacturingUnited StatesAug 11, 2026

Showing the 20 most recent of 25. Browse recent data breaches for more.

Wallstreet leak site

The address we've seen Wallstreet publish victims from. Any .onion address needs the Tor Browser.

  • 4dwiv37h7hhuhjpvtn72hme4ylcv3qoe65arfc6mbweal7als6ma7pyd.onion

Wallstreet questions

Is Wallstreet still active?

Yes. Wallstreet posted its most recent victim on September 30, 2026. That's 17 victims in the last 30 days.

How many victims has Wallstreet claimed?

Wallstreet has named 25 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did Wallstreet first appear?

The first victim we recorded for Wallstreet was posted on June 23, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does Wallstreet target?

Manufacturing accounts for the most victims we can classify, with 6. Healthcare follows at 6.

Has Wallstreet already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.