Skip to content
Ransomware

Family Partnerships of Central Florida listed on moneymessage ransomware leak site

Family Partnerships of Central Florida has been listed on the leak site of the moneymessage ransomware group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: moneymessage
  • Country: United States
  • Sector: Government & Defense
  • Announcement date: January 28, 2026

Moneymessage claims a breach of Family Partnerships of Central Florida

The moneymessage ransomware group has officially listed the Family Partnerships of Central Florida on its dedicated leak site. This announcement, made on January 28, 2026, serves as a claim by the threat actors regarding a compromise of the organization's data. While the group has published the organization's name, public information regarding the specific methods, identity, or history of the moneymessage group remains limited.

Ransomware attacks often follow a pattern known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The goal is to pressure the victim into paying a ransom by threatening to leak the stolen data on a public leak site. This tactic significantly increases the pressure on an organization, as the threat of a public leak can lead to severe reputational damage and legal consequences.

Details regarding the alleged data compromise

The announcement made by the moneymessage group contains claims regarding the compromise of the organization's data. However, the group has not provided specific details regarding the nature of the leaked or threatened data. There is no information provided regarding the volume of the data, the specific file types involved, or any ransom demands associated with this incident.

Furthermore, the provided documentation and screenshots associated with the claim do not display specific data content related to the Family Partnerships of Central Florida. The available visual evidence appears to contain information pertaining to different entities rather than the specific data of the target organization. Consequently, the listing names no specific data types.

About Family Partnerships of Central Florida

Family Partnerships of Central Florida is an organization that provides social services, foster care support, and community-based care to families and children in Central Florida. The organization focuses on child welfare and activities aimed at strengthening family unity. Given the nature of their mission, the organization handles sensitive information related to community welfare and family support services.

Potential risks and organizational implications

The alleged incident may pose significant risks to the operational continuity of the organization. If a data breach has indeed occurred, it could lead to secondary risks such as identity theft or targeted phishing attacks directed at employees and stakeholders. Such secondary attacks often exploit the information stolen during the initial breach to gain further access or to defraud individuals.

Because the organization is based in the United States, it may be subject to notification requirements under relevant state laws and federal regulations. Organizations in the social services and government-adjacent sectors must navigate complex regulatory landscapes when dealing with potential data exposure. The publication of data by a group like moneymessage could negatively impact the organization's reputation and overall security posture.

To mitigate the risks associated with such threats, organizations typically focus on several defensive strategies. These include implementing robust multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for all staff members. Additionally, monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are critical components of a modern cybersecurity defense strategy. As the group's methods suggest, the threat of data publication remains a primary driver for modern ransomware operations.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories