On October 14, 2025, the City of Riviera Beach, Florida appeared on the leak site of the qilin ransomware group after its internal files were allegedly exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Available reporting describes the incident as a ransomware deployment that resulted in the theft of municipal files. The qilin group listed the city on its public leak portal, a common tactic used to pressure victims into payment. Public reporting indicates that the exact number of affected residents remains unknown, and the specific types of records exposed have not been fully detailed by either the city or the attackers. The leak site entry states that data was both encrypted and exfiltrated, following the double-extortion model now standard in ransomware operations.
October 14, 2025 marks the date the city was publicly listed. No official statement has clarified the initial access vector, the volume of data taken, or whether any resident personally identifiable information was included. Industry research from sources such as DoxxScan™ continuous monitoring indicates that municipal breaches frequently expose names, addresses, dates of birth, Social Security numbers, and financial records used in local services.
Why This Matters for You and Your Family
When a city government suffers a breach, the people whose records it holds—often every resident who has paid a utility bill, applied for a permit, or registered a vehicle—can face direct risk. Your personal information may now sit in an attacker-controlled archive. If that data includes contact details, government identifiers, or family member information, it can be sold or published without warning.