Village Church of Barrington listed on Nokoyawa ransomware leak site

• Ransomware group: Nokoyawa
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: July 29, 2023

The Nokoyawa ransomware group has listed the Village Church of Barrington on its dedicated leak site, claiming that the religious institution has been the victim of a data breach. This announcement, made on July 29, 2023, marks a new instance of targeted cyber extortion involving a non-profit organization.

Details of the claim

According to the announcement posted on the group's platform, the threat actor known as Nokoyawa claims to have successfully obtained data belonging to the Village Church of Barrington. The group has indicated that the process of uploading the stolen files is currently ongoing. Furthermore, the threat actors have set a deadline, stating that they intend to upload the files by August 2, 2023. The leak site listing includes the organization's official website and a brief descriptive text regarding the institution.

Data involved in the incident

At this stage, there is no clear information regarding the specific nature or the exact types of the leaked data. The group has not provided details concerning the volume of files or the total size of the data set. Currently, the listing names no specific data types.

About the organization

The Village Church of Barrington is a religious institution located in Barrington, Illinois, within the United States. Founded in 1977, the organization is dedicated to making disciples through gospel-centered worship, community, and service.

Analysis and potential risks

Publicly available information regarding the Nokoyawa group remains limited, making it difficult to assess their full operational patterns. However, the adoption of double-extortion tactics by the group suggests a clear intent to exert pressure on the institution. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data but also steal sensitive information, threatening to release it publicly to force a ransom payment.

Because the Village Church of Barrington is a religious organization, there is a potential risk of exposure regarding sensitive personal information of members or donor records. If the claimed data is released, several secondary risks could emerge, such as identity theft or targeted phishing attacks directed at the members of the congregation. Such attacks often leverage the trust inherent in community-based organizations to deceive individuals.

Since the institution is based in the United States, any potential data breach may be subject to various state-level privacy regulations. Organizations operating in similar sectors often face significant challenges when managing sensitive member data. To mitigate such risks, organizations typically focus on implementing robust defensive measures, such as multi-factor authentication, regular data backups, and comprehensive employee training to recognize phishing attempts. Maintaining strict access controls and monitoring network traffic for unusual activity are also standard defensive steps used to protect sensitive community and donor information from unauthorized access.