Wallstreet

Wallstreet is a ransomware threat actor observed conducting data-theft and extortion operations against organizations in multiple sectors, including healthcare, public sector law enforcement, manufacturing-related businesses, and insurance or medical assistance services. Reported victims indicate activity affecting organizations in the United States and Latin America, suggesting opportunistic targeting rather than a narrowly specialized victim profile.

The group is associated with ransomware intrusions that are characterized as both encryption and data-breach events, consistent with modern double-extortion tradecraft in which victim data is stolen and used to pressure organizations in addition to operational disruption. Observed victimology includes a hospital, a police department, an automotive services company, and a health insurance or medical assistance provider, indicating willingness to target critical and sensitive environments.

Publicly available information in this context is limited and does not support high-confidence attribution to a specific nation state, geographic origin, or broader intrusion cluster. No corroborated sub-groups or widely used alternate aliases are established here beyond the name Wallstreet itself. Based on currently available reporting, Wallstreet should be tracked as a ransomware actor engaged in financially motivated attacks and associated data breaches across diverse sectors.