Inc Ransom ransomware group lists ccrcda.org on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Government & Defense
• Announcement date: May 16, 2025

Inc Ransom claims to have stolen data from ccrcda.org

The ransomware group known as Inc Ransom has listed the organization ccrcda.org on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully targeted the organization and obtained a significant volume of data from their systems.

The threat actor published this leak announcement on May 16, 2025. In the post, the group alleges that the breach occurred on the same day, May 16, 2025. This claim involves the alleged theft of 200 GB of data, which the group asserts was taken directly from the organization's internal systems.

Details of the alleged data theft

While the specific file count and the exact ransom demand have not been disclosed by the group, the announcement provides details regarding the nature of the information they claim to possess. The group alleges that the 200 GB of data contains sensitive information related to both the organization's internal operations and its personnel.

The leaked information is said to include a detailed list containing specific details about the organization's staff. According to the group's claims, the following types of data have been compromised:

• Employee contact information
• Organizational operational data

Specifically, the group claims the data includes names, job titles, and direct phone numbers of employees, alongside various pieces of organizational operational data.

About Catholic Charities of the Diocese of Albany

Catholic Charities of the Diocese of Albany is a private social service agency that operates within the state of New York. The organization is dedicated to providing essential support to individuals who are economically disadvantaged and vulnerable. Affiliated with the Diocese of Albany, the agency manages a wide variety of humanitarian aid and support programs that span across fourteen different counties.

Analysis of the impact and risks

The exposure of the alleged data carries several significant risks for the organization and the individuals involved. The information claimed to be stolen, particularly the employee contact details, could be utilized by malicious actors to conduct highly targeted phishing attacks against the organization's staff. Such attacks often leverage stolen personal details to gain further unauthorized access to corporate networks.

Given that the organization operates in the social services sector, the exposure of sensitive personal information may create adverse effects on the individuals served by the agency. Furthermore, as a United States-based entity, the organization may face specific data privacy obligations triggered by such an event under relevant state laws and federal regulations.

The tactics employed by Inc Ransom appear to follow the pattern of double extortion. In a double extortion scheme, threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to publish it on a leak site if a ransom is not paid. This method increases secondary risks following the publication of data and can potentially impact the organization's operational continuity. Organizations in the social services sector often focus on implementing robust defensive measures, such as multi-factor authentication, regular data backups, and continuous employee security awareness training, to mitigate these types of evolving threats.