The Wallstreet ransomware crew listed Prism Medical Products, a U.S. supplier of wound care, ostomy, urological, and compression supplies, on its dark web leak site on October 23, and the company has not publicly confirmed an intrusion.
The listing, logged by ransomware.live and mirrored by DeXpose, HookPhish, and BrandShield’s ATLAS tracker, came with the group’s usual deadline threat to publish stolen data unless negotiations open. No file count, data sample, or record volume was posted with the claim.
Prism fits a pattern Wallstreet has been running for months. The group has already claimed a Louisiana clinic after a care-disrupting attack, St. Francis in Hawaii, a rural Illinois hospital, and Cedar County Memorial Hospital in Missouri. Trackers have separately listed a Heritage Senior Living operator and an Arthritis Center of Riverside, California practice among recent victims.
Home medical equipment suppliers are a soft target with an outsized reach. A distributor of ostomy and wound-care supplies holds patient names, shipping addresses, insurance details, and order histories – and a compromise can interrupt deliveries that patients depend on weekly.
Two-of-three corroboration matters here: trackers agree on victim, group, and date, but a leak-site entry is an allegation, not a confirmed breach. Prism customers should watch for unexpected contact from people referencing order details, and providers who buy through the vendor should ask for written assurance on whether PHI was exposed.
