Queens Center For Change listed on Sinobi ransomware leak site

• Ransomware group: sinobi
• Country: United States
• Sector: Healthcare
• Announcement date: September 28, 2025

The threat actor known as Sinobi has listed the Queens Center For Change on its ransomware leak site, claiming to have successfully targeted the organization. According to the announcement made on September 28, 2025, the group alleges they have gained unauthorized access to the organization's systems and exfiltrated a significant volume of data.

Details of the alleged attack

The Sinobi group claims that the breach occurred around June 15, 2025. In their announcement, the threat actors assert that they have not only accessed the internal systems but have also encrypted the organization's data. To facilitate the return of the information, the group has issued a ransom demand of 5,000,000 USD.

Ransomware attacks of this nature often involve a strategy known as double extortion. In such scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information prior to encryption. This allows the threat actors to threaten the public release of the stolen data if the ransom is not paid, thereby increasing the pressure on the victim organization. Such tactics are increasingly common among modern ransomware groups operating on leak sites.

Data involved in the claim

The information provided by the Sinobi group suggests that the breach involves a substantial amount of data, specifically 31 GB. The threat actor has categorized the stolen information as being highly sensitive, specifically noting that the files fall under the following categories:

• Customer data
• Confidential data

A screenshot provided by the group suggests that the compromised information may be related to the organization's behavioral counseling services. The exposure of such specific datasets can lead to significant privacy concerns for the individuals involved.

About Queens Center For Change

Queens Center For Change is an organization based in New York that provides specialized behavioral counseling services. The agency utilizes licensed social workers to offer support across several sensitive areas, including anger management, problematic sexual behaviors, and various forensic counseling services. Given the nature of these services, the organization handles highly personal and sensitive client information.

Impact and industry implications

This incident highlights the potential risks faced by organizations operating within the healthcare sector. The exposure of sensitive counseling data can lead to severe consequences for both the organization and the individuals whose information was compromised. For a United States-based entity, such a breach may trigger legal proceedings and administrative sanctions under HIPAA regulations, which govern the protection of sensitive patient health information.

Furthermore, the exposure of private information regarding clients can create secondary risks, such as identity theft or targeted phishing attacks directed at the affected individuals. While information regarding the Sinobi group remains limited, the scale of the ransom demand indicates an attempt to cause significant operational and reputational damage.

To mitigate such risks, organizations in the healthcare and counseling sectors typically focus on robust defensive measures. These include implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized access, and ensuring that all sensitive data is encrypted both at rest and in transit. Regular security awareness training is also a fundamental component of a strong defense against the initial access vectors often used by ransomware groups.