St. Francis Healthcare System of Hawaii, a Catholic nonprofit that provides hospice and supportive care in Hawaii, has been named by the Wallstreet ransomware group on its data-leak site. The organization has not publicly confirmed what was taken.
St. Francis Healthcare System of Hawaii’s Data Breach Investigation
St. Francis Healthcare System of Hawaii is a Catholic, nonprofit healthcare organization that provides hospice and supportive care to families in Hawaii, including hospice at home, hospice in a facility and spiritual care. In early October 2026, threat-intelligence trackers reported that a ransomware group calling itself Wallstreet had added the organization to its data-leak site. This page covers that claim and what it could mean for patients, families and employees. It is not a confirmed account of what happened inside the organization’s systems.
According to public ransomware-tracking sources, the listing was first observed on October 3, 2026. Those trackers record when a group posts a victim name, and they do not verify that data was stolen. The sources we reviewed do not say how many people could be affected, what kinds of files the group claims to hold, whether a ransom demand was made, or whether any stolen data has been published. We did not locate a statement from St. Francis Healthcare System of Hawaii, a notice letter, or a filing with any state attorney general. We are not guessing at any of those details.
That distinction matters. A leak-site listing is an allegation made by criminals, who have every reason to exaggerate. At the same time, groups of this kind do often post real data when a victim does not pay, so a listing is a reason for anyone connected to the organization to pay attention. If the claim is accurate and the organization completes an investigation, it would be expected to send written notices to the people whose information was involved, and it may also file reports with regulators.
Healthcare providers are common ransomware targets because their records are valuable and because disruption to patient care puts pressure on them to respond quickly. Hospice and supportive care organizations hold especially sensitive information, including medical conditions, diagnoses, medications, insurance details, and the contact information of patients and their family members, caregivers and emergency contacts. Employee and volunteer records can also be stored, such as payroll and tax information.
Many ransomware groups now use what is often called double extortion. They copy files out of a victim’s network, lock the systems, and then threaten to publish the copied files unless a payment is made. A name appearing on a leak site usually means negotiations have not succeeded, or that the group wants to pressure the victim, but it does not tell the public what was taken. Sometimes the group posts samples or file listings days or weeks later, and that is often when the scope of an incident becomes clearer. Organizations may also take weeks to confirm what happened, because they must first restore systems and work with forensic specialists to determine which files were accessed.
If St. Francis Healthcare System of Hawaii confirms that personal information was taken, the notice letter will be the key document. It should describe the date of the incident, the kinds of data involved, and any credit monitoring or identity protection being offered. Anyone who receives one should keep the letter and envelope. Notices for healthcare incidents are generally sent within set timeframes once an organization finishes working out whose information was involved, and that review can take weeks or months.
In the meantime, there are sensible precautions for people connected to the organization, including patients, their families and staff. Be alert to unexpected calls, emails or texts that claim to be from the organization, a hospice provider or an insurer and that ask for personal or payment information. Criminals sometimes use a breach claim as cover for phishing. Watch your insurance explanations of benefits for services you did not receive. This page will be updated if the organization confirms the incident or a regulator filing becomes public.
When Did This Breach Occur?
Ransomware-tracking sources report that the Wallstreet group’s listing of the organization was first observed on October 3, 2026. The organization has not publicly stated when any incident occurred or when it was discovered, so the actual date of any unauthorized access is not known from the sources we reviewed.
What Information Was Breached?
The categories of information involved have not been confirmed. No notice letter or regulator filing was located. Because the organization provides hospice and healthcare services, records at risk in an incident of this kind could include patient, family and employee information, but this is general context and not a confirmed list. Anyone who receives a notice should check it for the data types listed for them.
What You Can Do
If you have been a patient, family member, volunteer or employee connected to St. Francis Healthcare System of Hawaii, consider these steps:
- Watch your mail for a notice from the organization, and keep it if one arrives.
- Check your credit reports for free at annualcreditreport.com, and consider a fraud alert or credit freeze with Equifax, Experian and TransUnion.
- Review insurance explanations of benefits and bank statements for services or charges you do not recognize, and report anything suspicious right away.
- Be cautious with unexpected calls, texts or emails that mention the organization or a breach, and do not share personal details with unsolicited contacts.
- Report suspected identity theft to the Federal Trade Commission at identitytheft.gov and to your state Attorney General.
File a Data Breach Lawsuit Against St. Francis Healthcare System of Hawaii
If you receive a notice that your information was involved in a data breach at St. Francis Healthcare System of Hawaii, you may have legal options. Healthcare organizations are expected to protect the sensitive information in their care, and a lawsuit can help hold them accountable when they fail to do so.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
