A ransomware attack on a Louisiana multi-specialty clinic has left staff locked out of patient records for nearly two weeks, and an extortion crew has now added the practice to its public leak page.
The Wallstreet gang listed Green Clinic on its dark web site on October 14, according to the ransomware.live tracker, roughly twelve days after the clinic confirmed it had been hit. Green Clinic first detected the intrusion at about 6:30 a.m. on Friday, October 2, and immediately shut down computer and network operations.
In a statement to patients, the Ruston-based provider said the attack encrypted files and systems across its network, “leaving our staff without access to many of the electronic systems we rely upon during normal operations, including patients’ electronic medical records.” Green Clinic attributed the intrusion to a threat actor calling itself “Wall Street” and said it notified the FBI and the Cybersecurity and Infrastructure Security Agency.
The clinic brought staff in over a weekend to train on a replacement clinical system, aiming to resume broader patient care on October 14. Even then, it warned that historical medical records and appointment schedules would not be restored immediately, and that providers might not have a patient’s prior chart on hand. Patients were urged to bring insurance cards, identification, and medication lists to appointments.
Green Clinic, founded in 1948 and acquired by Allegiance Health Management in 2024, serves patients across North Louisiana. The clinic has not confirmed whether personal or protected health information was exposed, saying it would not “speculate about the extent of the incident” while its investigation continues.
The claim is the latest in a run of Wallstreet listings against care providers, following hospitals in Illinois, Iowa, and Hawaii earlier this fall.
