E-Z Pack Trucks Data Breach

Wallstreet added E-Z Pack Trucks, a U.S. manufacturer of refuse and recycling trucks, to its public leak site on October 14, 2026. This listing is particularly noteworthy for organizations that supply municipal fleets. E-Z Pack Trucks operates its business at ezpacktrucks[.]com and is based in the United States. In the 60 days preceding this disclosure, Wallstreet claimed responsibility for 32 additional victims. The group’s primary targeted verticals include Healthcare, Professional Services, and Other sectors. Key victim countries for Wallstreet are the United States, Sweden, and the United Kingdom. Recent victims listed by the group include Lambertinum Seniorenwohnanlage (Germany, Healthcare), Danvikshem / Stiftelsen Danviks Hospital (Sweden, Healthcare), Brunnberg & Forshed Arkitektkontor (Sweden, Professional Services), and Mantum Holding AB (Sweden, Other). Wallstreet’s targeting strategy is not confined to a single industry; they appear to target any entity presenting an accessible attack surface or a credible financial motive.

No prior exposure was found for the domain ezpacktrucks[.]com in our analysis of stealer logs. It is important to note that this finding does not definitively prove that the organization’s credentials were not compromised. Attackers may gain access through various methods not always reflected in stealer-log data, such as phishing campaigns, exploitation of unpatched remote services, or access brokered through underground marketplaces. Therefore, the absence of a direct correlation in stealer logs should not be interpreted as a guarantee of a secure posture. The transportation sector, particularly suppliers to municipal governments and large logistics operators, presents an attractive target for ransomware groups like Wallstreet. These organizations often have a low tolerance for service disruptions, making them more susceptible to extortion. The potential exfiltration of proprietary manufacturing data, fleet management systems, and customer contracts provides additional leverage for attackers beyond the immediate impact of operational disruption. Such specialized manufacturers may operate with lean security teams and a mix of legacy and modern IT infrastructure, potentially creating exploitable vulnerabilities. Implementing robust network segmentation between operational technology (OT) and corporate IT, ensuring internet-facing services are patched and secured, and maintaining a tested incident response plan are crucial countermeasures for organizations in this sector.