NBS Canada listed on sinobi leak site with a ransom demand

• Ransomware group: sinobi
• Country: Canada
• Sector: Professional Services
• Announcement date: December 18, 2025

The threat group known as sinobi has listed NBS Canada on its leak site, claiming to have carried out a ransomware attack against the organization. According to the announcement, the group is demanding a ransom of 5,000,000 $ following the incident.

The claimed ransomware incident

On December 18, 2025, the sinobi group published a listing for NBS Canada on their dedicated leak site. In this announcement, the group alleges that they have successfully executed a ransomware attack against the organization. The claim specifically states that the organization's data has been encrypted by the attackers. While the group has made this public claim, it is noted that information regarding the specific identity and operational details of the sinobi group remains limited in the public domain.

Ransomware attacks of this nature typically involve a process where attackers gain unauthorized access to a network and deploy malicious software to lock the victim's files. Once the data is encrypted, the attackers demand a payment, often in cryptocurrency, in exchange for the decryption key. This tactic is a cornerstone of modern cybercrime, often evolving into double extortion, where attackers not only encrypt data but also threaten to leak sensitive information if the ransom is not met.

Data and encryption details

The announcement provided by the sinobi group includes a screenshot indicating that the organization's data has indeed been encrypted. However, the listing does not provide a detailed list regarding the specific types of data that have been leaked or stolen. There is no information available regarding the total volume of data or the specific file count involved in this incident.

In many ransomware scenarios, the lack of transparency regarding the specific data types stolen is a common occurrence during the initial stages of a leak site listing. Organizations often face uncertainty regarding whether the breach involves personally identifiable information, financial records, or proprietary internal documents until a full forensic investigation is completed.

Organization profile

NBS Canada (The Network of Biblical Storytellers Canada) is a nationwide Christian association dedicated to mastering and sharing the art of telling the Bible by heart. The organization provides support to both individuals and religious institutions through workshops, festivals, and educational resources focused on biblical storytelling.

Potential impact and risks

The encryption of the organization's data may lead to significant disruptions in operational continuity. For an organization that provides workshops, festivals, and educational resources, the inability to access digital records and tools can halt day-to-day activities and service delivery.

As a Canada-based entity, any potential data breach could fall under the scope of PIPEDA regulations, potentially exposing the organization to legal obligations. Furthermore, if the ransom demand is not met, secondary risks may emerge, such as the public release of sensitive data or the sale of that data to third parties. There is also a heightened risk of identity theft or targeted phishing attacks directed at the organization's members and participants.

To mitigate such risks, organizations in the professional services and non-profit sectors often implement defensive measures such as regular offline backups, multi-factor authentication, and continuous monitoring of network traffic. Strengthening security awareness training for all members and participants can also help reduce the likelihood of successful initial access through phishing.