Catholic Charities of the Diocese of Albany Listed by pear Ransomware Group

On July 30, 2025, the pear Ransomware Group added Catholic Charities of the Diocese of Albany to its public leak site, claiming that internal files had been exfiltrated during a ransomware attack on one of the largest private social service agencies in the region.

What's Publicly Reported from Reporting

Public reporting indicates the organization’s data appeared on the onion-based leak page hosted at pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion under the listing “ccrcda.” Available details describe the incident as a classic ransomware operation in which attackers gained access, exfiltrated files, and later published a sample or notification on their leak site. The exact number of individuals whose information was taken remains unknown, and the specific types of records have not been publicly detailed beyond the broad description of internal files.

Catholic Charities of the Diocese of Albany provides extensive social services across multiple counties. Any client, donor, employee, or vendor whose personal information passed through the agency’s systems could be affected. Because the victim count is listed as unknown, families who have interacted with the organization in the past decade should treat the breach as relevant to them until more information surfaces.

Why This Matters for You and Your Family

When a social-service provider is breached, the data involved often includes names, addresses, dates of birth, Social Security numbers, financial aid records, medical or counseling notes, and contact details for entire households. Internal files from such agencies frequently contain information about children, seniors, and low-income families who sought assistance. Once that information reaches a ransomware leak site, it becomes freely available to identity thieves, fraudsters, and harassers.

July 30, 2025 marks the public confirmation of the incident. The longer the data sits on the dark web without remediation, the higher the chance it will be packaged and sold on additional forums. For ordinary families, this translates into elevated risks of tax fraud, loan applications in your name, or targeted phishing calls that reference real details from your past interactions with the charity.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at dumping raw files. They or subsequent buyers can link the exposed records to your email addresses, phone numbers, and online usernames. A single leaked address or case number can serve as the starting point for an identity chain that reveals your children’s names, schools, and even gaming accounts. Credential leaks of this nature frequently cascade into account takeovers on Steam, Roblox, Discord, or other platforms where kids use the same email or password they or their parents once used for legitimate services.

These chains turn a single breach into long-term exposure. Public records, social-media handles, and family associations become easier to map, increasing the likelihood of doxxing, swatting, or extortion attempts aimed at vulnerable households.

Pear Ransomware Group’s Known Track Record

Public reporting attributes the pear Ransomware Group with operations that emerged in late 2024. The group has listed healthcare providers, educational institutions, and nonprofit organizations among its prior victims. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files and deployment of ransomware. When payment is not received, the group publishes samples or full datasets on its leak site with countdown timers intended to pressure victims. The exact tactics used against Catholic Charities have not been disclosed, but the public listing follows the group’s established pattern of naming and shaming organizations that do not meet its demands.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have been exposed in the Catholic Charities files.
• Rotate any password you ever used when registering with or donating to Catholic Charities of the Diocese of Albany, and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught and addressed in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become targets when credential leaks create doxxing chains.
• Let remediation specialists handle takedown requests for any personal information already appearing on data-broker or leak sites tied to this incident.

The incident underscores that even organizations dedicated to helping others can become gateways for identity theft and harassment that reach your front door. Taking concrete steps now limits how far attackers can travel down the identity chain created by this claimed breach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. Source: pear leak site via ransomware.live