Skip to content
Ransomware Attack Reported on Walgreen Co. by Wallstreet Group

Ransomware Attack Reported on Walgreen Co. by Wallstreet Group

First seen 13 Nov 2026, 22:17 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 13, 2026 at 22:18 UTC
  • •Walgreen Co. is reportedly a victim of a ransomware attack by the Wallstreet group.
  • •Details regarding the attack, including data exfiltration or ransom demands, are unverified.
  • •The incident's impact and confirmation status remain unclear as of November 13, 2026.

On November 13, 2026, a post attributed to the Wallstreet ransomware group listed Walgreen Co. as a victim. The details of the attack remain unclear, as the post does not specify whether systems were encrypted or if any data was exfiltrated. No ransom demand or specific incident details were provided, and the post lacks corroborating evidence. Walgreen Co. is a prominent U.S. pharmacy and retail company, operating drugstores and providing health services. The nature and extent of the impact from this incident are currently unverified, and the company has not publicly confirmed the attack. The reporting emphasizes that the information is unconfirmed and should be treated with caution.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-11-13
Wallstreet claims Walgreen Co. as a victim
A post on the Wallstreet Onion Dark Web site lists Walgreen Co. as a ransomware victim, but lacks specific details about the attack.
Redpacketsecurity
2026-11-13
Ransomware post published
The post detailing the alleged attack on Walgreen Co. was published on November 13, 2026, with no confirmation from the company.
Ransomware.Live

More articles in this cluster (2)

Following this threat?

Track Wallstreet in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Has Walgreen Co. confirmed the attack?
No, Walgreen Co. has not publicly confirmed the ransomware attack as of now.
What details are known about the attack?
The details regarding the attack, including whether data was exfiltrated or systems encrypted, remain unclear.
What should organizations do in response?
Organizations should monitor for further updates and assess their own security posture, as specific IOCs or vulnerabilities have not been disclosed.