Wsi
bd_0842f9694018f68a · schema v1 · pii pii-v1
Full breach record for Wsi →2 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Wall Street Institute www.wallstreetenglish.com https://www.zoominfo.com/c/wall-street-institute/372818113 If the management of this company does not want a global leak of personal data, we advise you to contact us. ------------------------------ Wall Street English (formerly Wall Street Institute) is an international English language learning academy for children and adults around the world. Wall Street English was established in 1972 in Italy by Italian Luigi Tiziano Peccenini. The company has over 3 million alumni with a current enrolment of 180,000 students. Using a franchise model, they currently operate over 450 centers in 28 countries in North Africa, East Asia, Southeast Asia, Europe, Latin America, and the Middle East. Its international offices are in Hong Kong and in Barcelona, Spain. In 2013, Wall Street Institute launched a company-wide rebranding, changing its name and identity. The company now operates as Wall Street English. The Wall Street English program is designed for all levels of learners. They have 20 different levels of English language courses ranging from beginner to advanced.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 24, 2025
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.