The Wallstreet extortion crew listed St. Francis Healthcare System of Hawaii on its dark-web leak site, claiming to have taken data from the Catholic nonprofit. Trackers logged the post on October 3. The gang published no samples, data volume or deadline with the claim.
St. Francis describes itself as a nonprofit health organization serving Hawaii families since 1927, with services that span home care, hospice, senior living and other community programs. The organization has not confirmed the breach.
The listing adds to a busy stretch for the crew, which has spent recent weeks posting hospitals and care providers to its page. A Wallstreet claim has also been tied to Gibson Area Hospital in Illinois, and the gang has named other health and public-sector victims.
For defenders, a leak-site post is an early-warning signal that invites urgency, not panic. Organizations named in unverified claims should quietly verify exposure, rotate privileged credentials, hunt for persistence, and prepare patient and regulator notifications in case the intrusion is confirmed.
