codacinc.org Listed by qilin Ransomware Group

On July 11, 2024, the non-profit organization CODAC appeared on the leak site operated by the qilin ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Rhode Island-based provider of addiction treatment, recovery, and prevention services. The disclosure does not specify the number of individuals affected or list exact data types beyond claiming that internal files were taken.

Primary Disclosure Details

The qilin leak site entry, accessible via the .onion address tracked by ransomware.live, explicitly names codacinc.org and asserts that data was stolen in the course of a ransomware operation. No sample files are publicly shown in the listing itself, and the notification does not quantify records or name the precise systems compromised. The disclosure indicates the incident occurred prior to the July 11 publication date, but provides no timeline for initial access or exfiltration. Public reporting on qilin listings consistently treats these postings as evidence that sensitive internal documents have been removed from the victim environment.

Why This Matters for You and Your Family

If you or anyone in your household has received treatment, counseling, or support services from CODAC in the past 50 years, your personal information may now sit in an attacker-controlled archive. Health-related records held by addiction-treatment providers routinely contain names, dates of birth, Social Security numbers, contact details, insurance information, and clinical notes. Exposure of such material creates immediate financial and reputational risk because criminals can use it to file fraudulent tax returns, open accounts in your name, or pressure you with the threat of releasing private medical details. Even when the leak-site listing does not detail what was taken, the claimed exfiltration of internal files means you must treat your data as public.

Doxxing and Identity-Chain Implications

Health and nonprofit client data rarely exists in isolation. A single email address or phone number allegedly taken from CODAC’s files can be correlated with gaming usernames, social-media handles, and family-member records to build a complete identity chain. Once attackers link your treatment history to an online gamer tag or a child’s Roblox or Fortnite account, they gain leverage for extortion that feels intensely personal. Credential leaks of this nature frequently cascade into account takeovers across unrelated services, turning one breach into a multiplying set of compromises that expose your entire household.

Qilin’s Publicly Known Track Record

Public reporting attributes the emergence of the qilin ransomware group to mid-2022. The actors have since targeted healthcare providers, educational institutions, and municipal governments across multiple countries. Their typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, qilin operators wait a short period before publishing victim data on their leak site if ransom is not paid. The group’s extortion style combines file encryption with selective publication of stolen documents, increasing pressure on victims who handle sensitive personal information.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains back to the CODAC exposure.
• Rotate any password you ever used at codacinc.org or related services and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after a health-provider breach.
• Let remediation specialists handle data-broker takedown requests and opt-out processes on your behalf while you focus on securing accounts.

The CODAC listing is a reminder that even long-established community nonprofits can become targets, and the data they hold about your family can fuel identity theft or targeted extortion long after the initial announcement fades. Start your DoxxScan trial today; its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give you a practical way to reduce the long-term damage from incidents like this one.