Cathedral Prep (villalan.edu) Listed by INC Ransom Ransomware Group

Cathedral Prep, a Diocese of Erie Christ-centered men’s college preparatory school, was listed on the Incransom ransomware leak site on August 18, 2024. The school’s internal files were allegedly exfiltrated during a ransomware attack, placing any staff, faculty, students, alumni, and families whose information resided in those systems at risk of further exposure.

Primary Disclosure Details

The Incransom leak site listing states that Cathedral Prep (villalan.edu) suffered a ransomware incident in which attackers successfully exfiltrated internal files. The disclosure does not quantify the number of affected records, list specific data types beyond “internal files,” or reveal the ransom demand. It simply states the data was taken and is now held by the group. The exact date of initial compromise also remains undisclosed in the listing.

Public reporting on Incransom indicates the group follows a double-extortion model: they first encrypt victim systems and then threaten to publish stolen data unless a ransom is paid. In this case the leak site entry serves as the public proof-of-exfiltration step.

Why This Matters for You and Your Family

If you or your child attended Cathedral Prep, worked there, or had any administrative, financial, or enrollment records stored in the school’s systems, your personal information may now sit in an attacker’s repository. Internal files from a school environment frequently contain names, dates of birth, Social Security numbers, addresses, parent contact details, medical notes, and payment records. Even without an exact victim count, the exposure creates immediate identity-theft and fraud risk for entire households tied to the institution.

Ordinary families rarely realize how many documents a preparatory school retains long after a student graduates. Once that data leaves the school’s control, you lose the ability to know exactly what was taken or when it might surface on criminal marketplaces.

Doxxing and Identity-Chain Implications

Ransomware groups like Incransom rarely stop at posting a single zip file. They often slice the stolen data and sell or trade portions on multiple underground forums. A seemingly harmless school directory can be combined with other breaches to build a complete identity chain linking your name, address, phone number, email addresses, and family relationships. These chains fuel spear-phishing campaigns, account takeovers, and eventual doxxing of both parents and students.

Credential leaks from school systems frequently cascade into gaming accounts. Children’s usernames, emails, or reused passwords exposed in the Cathedral Prep files can give attackers an entry point into Roblox, Fortnite, Discord, or Steam profiles. Once those gaming accounts are hijacked, attackers use them to harvest further personal details or to pressure families for payment.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom’s emergence to early 2024. The group has targeted organizations across education, healthcare, and local government sectors. Notable prior victims include other school districts and small-to-medium enterprises whose internal documents appeared on the same leak site. Their typical playbook begins with phishing or exploitation of remote-access tools for initial access, followed by lateral movement to exfiltrate sensitive files before deploying ransomware. They maintain a leak site to pressure victims who refuse to pay, publishing samples and eventually full datasets if demands are unmet.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at Cathedral Prep or villalan.edu anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your family’s data is caught in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let the remediation specialists handle takedown requests across data brokers and underground forums for you.

The Cathedral Prep breach is a reminder that educational institutions remain high-value targets whose security shortcomings directly affect your family’s privacy for years to come. Start your DoxxScan trial today and combine continuous monitoring, identity-chain mapping, and hands-on remediation by specialists to reduce the long-term damage from this and future exposures. DoxxScan is also effective for protecting gaming accounts—yours or your children’s—because credential leaks like this one routinely cascade into account takeovers and doxxing chains.