Illinois hospital claimed by Wallstreet ransomware

Wallstreet has claimed a ransomware attack on Gibson Area Hospital & Health Services, a nonprofit health provider in Illinois, United States. FalconFeeds.io said the organization may have been hit by Wallstreet and cited a possible exfiltration of 600 GB of data. Ransomware.live later logged the hospital as a victim associated with the group and placed it in Gibson City.

What is known about the incident against Gibson Area Hospital?

Public attribution points to Wallstreet and to a possible data leak, but the available material only confirms that the group claimed the attack and that FalconFeeds.io reported 600 GB as allegedly exfiltrated. Ransomware.live also added the case to its victim registry on September 30, 2026.

Dexpose published a note on Wallstreet's claim against Gibson Area Hospital & Health Services on September 29, 2026. That same day, FalconFeeds.io posted an alert on X about the organization and the amount of data that may have left the affected environment. One day later, ransomware.live kept the case in its database of victims linked to Wallstreet.

What other cases appeared in the U.S. health sector?

Ransomware.live registered West County Health Centers as a ransomware victim on September 30, 2026, and HIPAA Journal reported that the group Worldleaks claimed responsibility for an attack against a critical hospital in California. This material does not provide further operational details about those cases.

The overlap of incidents adds pressure on U.S. medical providers and hospitals, although the material provided only allows those reports and their publication or registry dates to be identified.

What precedent helps put the health sector impact in context?

The AHA cited the FBI as saying there were 460 ransomware attacks in the health sector in 2025, more than in any other critical infrastructure sector. The New York Times also reported that the Change Healthcare attack affected 190 million people and forced 130 million patient notifications.

That precedent still weighs on the hospital ecosystem because it shows how far a single intrusion can reach across medical and administrative services. Alongside recent cases, the Change Healthcare figure remains one of the largest cited for the sector.

What dates and sources appear in these reports?

The available dates place Wallstreet's claim and FalconFeeds.io's alert on September 29, 2026, Gibson Area Hospital & Health Services' entry in ransomware.live on September 30, 2026, and West County Health Centers' entry in the same database on September 30, 2026.