Devman ransomware group lists www.eastersealsnei.org on its leak site

• Ransomware group: Devman
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: December 1, 2025

The Devman ransomware group has listed Easterseals Northeast Indiana on its dedicated leak site. According to the group's announcement, the threat actor claims to have successfully exfiltrated a significant volume of data from the organization's systems.

Details of the claimed attack

The threat actor known as Devman has officially published a listing for www.eastersealsnei.org on its leak platform. The announcement, which was posted on December 1, 2025, identifies the organization as a target of their operations. The group claims that the attack took place on the same day the announcement was made, December 1, 2025.

In addition to the claim of unauthorized access, the Devman group has issued a specific financial demand. The group is demanding a ransom payment of 550,000 USD from the organization. Ransomware attacks of this nature often involve a tactic known as double extortion, where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage for payment.

Data involved in the incident

Regarding the scope of the alleged breach, the Devman group claims to have exfiltrated 280 GB of data from the organization. This represents a substantial amount of information that could potentially impact the organization's digital environment.

Despite the significant size of the claimed data, the listing provides no specific details regarding the nature of the allegedly exfiltrated data. The group has not specified the types of files or the categories of information that were targeted during the incident.

About Easterseals Northeast Indiana

Easterseals Northeast Indiana is a non-profit organization that provides various therapy, education, and social support services for individuals with disabilities, the elderly, and families in need. The organization conducts rehabilitation and care programs aimed at ensuring the full participation of individuals in society.

Potential impact and organizational risks

This incident may pose a risk to the organization's operational continuity. Until the nature of the allegedly exfiltrated data is clarified, the potential exposure of employee or customer information should be considered. As the organization is based in the United States, notification obligations under relevant state laws and federal regulations may arise due to the nature of the alleged breach.

Such leaks could facilitate identity theft and targeted phishing attacks against the organization or the individuals whose data may have been compromised. In general, when organizations face such threats, they must consider the implications of data exposure on their reputation and legal standing.

While public information regarding the Devman group remains limited, this event highlights the ongoing risks faced by non-profit organizations. Organizations in similar sectors often focus on robust defensive measures, such as implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of such incidents.