ccrcda.org Listed by INC Ransom Ransomware Group

On July 30, 2025, the ransomware group Incransom added ccrcda.org to its public leak site, claiming that it had exfiltrated internal files from Catholic Charities of the Diocese of Albany, a nonprofit that assists thousands of families across upstate New York with food, housing, counseling, and emergency aid.

What Public Reporting Shows

Public reporting indicates the organization suffered a ransomware attack in which attackers gained access to internal systems and removed sensitive files. The Incransom leak page lists Catholic Charities of the Diocese of Albany as victim number 68274db3ba68908013e7120a. No exact count of affected individuals has been released, but the organization serves vulnerable populations across 14 counties and maintains records that typically include names, addresses, dates of birth, Social Security numbers, financial details, and case notes for clients and donors. The breach notification deadline under New York law is 45 days from discovery, though the precise discovery date remains undisclosed in available reporting.

Why This Matters for You and Your Family

When a local nonprofit that helps your neighbors with rent, heating bills, or medical costs is breached, the information it holds about you or your relatives can appear on the dark web. Internal files often contain the same personal details you provided when seeking assistance: full names, home addresses, phone numbers, email accounts, government identifiers, and sometimes information about children or other household members. Once that data leaves the organization’s control, it can be sold, traded, or used to target you with identity theft, phishing, or harassment. Families who used Catholic Charities services in recent years should assume their information is now at higher risk.

The Doxxing and Identity-Chain Implications

Credential leaks from one organization rarely stay isolated. Attackers frequently link an email or phone number found in the Catholic Charities files to your accounts on other services. A password reused from an old case-management login can open the door to email, banking, or social media. Public reporting describes how such chains quickly escalate into full doxxing: home addresses tied to children’s school records, gaming usernames, or family photos. Gaming accounts belonging to your children are especially vulnerable because they often share the same email address or recovery phone number listed in nonprofit databases. When those gaming credentials fall into the wrong hands, the resulting harassment or account takeovers can expose even more personal details that loop back to your real-world identity.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom with emerging in late 2024 as a ransomware-as-a-service operation. The group has claimed responsibility for attacks on healthcare providers, local governments, educational institutions, and nonprofits. Its typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by claimed exfiltration of sensitive files before encryption. The group then demands payment and, upon non-payment, publishes samples or full datasets on its leak site to pressure victims. Available reporting describes Incransom’s extortion style as aggressive publication of victim data with countdown timers, a pattern consistent with the July 30, 2025 disclosure of the Catholic Charities files.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you ever used when interacting with Catholic Charities or similar organizations, and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing your own accounts.

The incident underscores that even organizations you trust with sensitive family information can become targets, and the fallout can reach your doorstep months or years later. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that connects online handles to real identities, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. Taking these steps now limits how far any single breach can follow you or your family.