Wallstreet Claims Data Theft from Saudi World Cup Stadium Consortium

Summary
Ransomware group Wallstreet claims it compromised the Saudi consortium building Jeddah Central Stadium and exfiltrated 17 TB of files, including employee data. The claims are unverified.
Key points
- Wallstreet claims it compromised the China Railway Construction Corporation Saudi Branch / Sama Construction consortium.
- The group alleges it exfiltrated 17 TB across 1.5 million files.
- The claimed stolen data includes personal information for more than 150,000 employees.
- Other allegedly taken material includes contract and dispute records, stadium design files, and supplier bid data.
- The post states that the claims have not been independently confirmed.
Article Details
- Victim
- China Railway Construction Corporation Saudi Branch / Sama Construction consortium
- Victim Domain
- Unknown
- Attack Date
- 2026-10-03
- Claim Date
- 2026-10-03
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed by Wallstreet; not independently confirmed
- Exfiltrated Data
- Wallstreet claimed it exfiltrated contract and dispute/suspension documents, IFC stadium design files, supplier and subcontractor bid data, and employee personal data.
- Exfiltrated Size
- Claimed 17 TB across 1.5 million files
- Ransom Demand
- Unknown
- Leak Status
- Unknown
