Incident analysis
Briab Group AB was listed by Wallstreet ransomware, a group with 50 victims recorded in this database. The listing appeared on the group's leak site on October 13, 2026.
Briab Group AB is based in Sweden. Sweden ranks #20 worldwide for ransomware disclosures, with 160 victims in this database.
Wallstreet typically follows a double extortion model: data is exfiltrated from the victim's systems before files are encrypted, so the victim faces two demands at once — pay to restore access, and pay to keep stolen data unpublished. The leak site, where this listing appeared, is the lever for the second demand.