Council for Relationships listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: United States
• Sector: Healthcare
• Announcement date: April 15, 2024

8base claims data breach at Council for Relationships

The ransomware group known as 8base has announced the addition of the Council for Relationships to its leak site. According to the announcement published on April 19, 2024, the threat actor claims to have successfully obtained various documents from the organization's servers. This development suggests that the group is utilizing double extortion tactics to exert pressure on the target organization.

Double extortion is a common tactic used by modern ransomware groups. In this method, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The threat actors then threaten to publish this stolen data on public leak sites if the ransom demand is not met. This approach increases the pressure on the victim, as the threat of a public data leak can cause significant reputational, legal, and regulatory damage, even if the organization has robust backups to recover from the initial encryption.

Details of the alleged data leak

While the specific volume of the stolen data and the exact ransom demand remain unknown, the 8base group has provided a list of the types of files they claim to have exfiltrated from the Council for Relationships servers. The alleged leak involves a wide range of administrative, financial, and personal documentation. The specific categories of data mentioned in the claim include:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Personal files

The presence of such diverse documentation suggests a broad access to the organization's internal systems, potentially touching upon various departments from human resources to finance and clinical administration.

About the Council for Relationships

The Council for Relationships is a non-profit organization based in Philadelphia. The organization provides therapy services to individuals and families, trains clinical professionals, and conducts research within the behavioral health field. It specializes in relationship therapy through the application of a family systems approach.

Analysis and industry implications

The 8base group is recognized as a double-extortion group that has been active since 2022. Although the group's infrastructure was disrupted in early 2025, these types of listings often reflect the outcomes of incidents that occurred in the past. Because the Council for Relationships operates within the healthcare sector, the leaked data may fall under strict regulatory frameworks, such as HIPAA, which governs the protection of sensitive patient health information.

The nature of the alleged data poses significant secondary risks to both the organization and the individuals involved. The exposure of personal files, employment contracts, and personal data can lead to identity theft or make employees and patients targets for highly specific, targeted phishing attacks. Such attacks often leverage the stolen information to appear legitimate, further compromising the security of the individuals involved.

For organizations operating in the healthcare and behavioral health sectors, incidents like this highlight the critical importance of robust data security processes. To mitigate potential legal and operational risks, it is often suggested that organizations review their data security protocols and ensure they are prepared to notify affected parties promptly. Implementing strong access controls, encryption for data at rest and in transit, and continuous monitoring can help reduce the likelihood and impact of such breaches. Furthermore, maintaining a clear incident response plan is essential for managing the legal and reputational consequences that follow a data leak.