On July 15, 2024, the Central College of the Lebanese Monks (ccj.edu.lb) appeared on the leak site operated by the qilin ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The college, which serves students and staff in Lebanon, has not yet published its own public notification detailing the number of people affected or the exact records involved.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch ccj.edu.lb
Get alerted the next time ccj.edu.lb files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about ccj.edu.lb’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The qilin leak site entry states that internal files were exfiltrated from ccj.edu.lb in a ransomware incident. It does not specify the volume of data, the number of records, or list sample files. The disclosure indicates the data is now available for download to anyone who visits the onion site or its mirrors. Ransomware.live aggregated and indexed this listing on the same date, providing the primary public record of the incident. No subsequent regulator filing or company breach notice has quantified the scope as of the latest available information.
Why This Matters for You and Your Family
If you or your children attended, worked at, or interacted with the Central College of the Lebanese Monks, your personal information may now sit in an attacker-controlled archive. Student records, employee documents, and administrative files frequently contain full names, dates of birth, national ID numbers, addresses, phone numbers, and email accounts. Once such data leaves institutional control, it circulates among cybercriminals who sell or trade it for years. Families in Lebanon and the broader diaspora face heightened risk because regional data brokers and fraud networks can quickly weaponize even small fragments of leaked information.
Doxxing and Identity-Chain Risks
A single institutional breach rarely stops at the initial dataset. Attackers and subsequent buyers combine the exposed files with other leaks to build detailed identity chains. An email address from the college database can link to your social-media handles, reused passwords, or children’s gaming accounts. These chains enable doxxing, targeted phishing, account takeovers, and eventual identity theft or extortion. Public reporting on similar incidents shows that educational organizations often store family contact details together, accelerating the linkage between parents, students, and siblings. The longer the data remains publicly available on the leak site, the greater the chance that multiple criminal groups will obtain and cross-reference it.