Temple Shalom listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Professional Services
• Announcement date: December 13, 2025

Temple Shalom targeted by dragonforce ransomware group

Temple Shalom, a community organization based in the Washington, D.C. area, has been listed on the leak site of the ransomware group known as dragonforce. The announcement, which appeared on December 13, 2025, indicates a significant data breach claim involving the religious institution.

Claims made by dragonforce

The dragonforce group has officially listed Temple Shalom on their leak site, alleging that they have successfully compromised the institution's data. According to the group's announcement, the attack occurred on December 13, 2025. The threat actors have stated their intention to release the stolen information publicly, a common tactic used in modern cyber extortion schemes.

Ransomware groups often employ a strategy known as double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. By threatening to leak this data on a public platform, the group increases the pressure on the victim to meet their demands, leveraging the threat of reputational damage and regulatory scrutiny.

Data involved in the alleged breach

While the group has claimed to have exfiltrated a substantial amount of information, they have not provided specific details regarding the exact nature or types of the leaked data. The volume of the data claimed to have been stolen is approximately 92.79 GB.

• Total claimed data volume: 92.79 GB

The listing names no specific data types or individual file categories that were part of the alleged theft.

About Temple Shalom

Temple Shalom is a Reform Jewish congregation located in the Washington, D.C. area. The institution serves approximately 400 families and functions as a religious community. Its mission is focused on celebrating the diversity of modern Judaism through various means, including education, worship, and active congregational participation.

Potential risks and organizational impact

This incident may pose a significant risk of exposure for sensitive personal information belonging to the institution's members and staff. For an organization operating in the United States, such a breach may trigger specific legal obligations. The organization may be subject to data breach notification requirements under relevant state laws and federal regulations depending on the nature of the information involved.

The leaked data, if released, could potentially be utilized by malicious actors for identity theft or targeted phishing attacks against the community members. Furthermore, such an event can lead to lasting reputational damage for the institution. To mitigate such risks, organizations often find it necessary to initiate a comprehensive forensic investigation to determine the full scope of the leaked data and to fulfill their duty to notify all affected parties.

Common defensive steps for organizations in the professional services and community sectors include maintaining robust backup systems, implementing multi-factor authentication, and conducting regular security awareness training for staff and members to defend against the phishing attempts that often follow such leaks.