emperors.edu Listed by INC Ransom Ransomware Group

On February 14, 2025, the incransom Ransomware Group listed Emperor’s College of Traditional Oriental Medicine on its leak site and began publishing what it claims are the school’s internal files. The Santa Monica, California graduate school, founded in 1983, offers accredited master’s and doctoral programs in acupuncture and Oriental medicine. Current and former students, faculty, staff, and anyone whose personal information was stored in the college’s systems may now have their data exposed.

What Public Reporting Shows

Public reporting indicates that Emperor’s College suffered a ransomware attack in which attackers exfiltrated internal files before encrypting systems. The incransom group posted the college to its dark-web leak site on Valentine’s Day 2025 and has begun releasing samples of the stolen data. Available reporting describes the exposed material as internal documents rather than a structured database of student records, though the precise volume and exact contents remain unconfirmed by the school. No official statement from Emperor’s College had been widely published at the time of the initial leak posting.

Why This Matters for You and Your Family

When a college or medical-training institution is breached, the information involved often includes names, addresses, dates of birth, Social Security numbers, medical or insurance details, and contact information for both current students and alumni. If your data or a family member’s data was among the records, it can be used for identity theft, tax fraud, or targeted phishing. Credential leaks like this one frequently cascade into account takeovers on other services where the same email and password were reused. Even if you never attended Emperor’s College, friends or relatives who did could unknowingly put your shared household information at risk.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at dumping one set of files. Once personal details surface, opportunistic criminals combine them with information from earlier breaches to build detailed profiles. A phone number found in the Emperor’s College files can be linked to gaming usernames, social-media handles, and family addresses. This creates an identity chain that makes doxxing, swatting, or sustained harassment far easier. Public reporting shows these chains often begin with seemingly minor educational or medical records and expand rapidly when passwords or security-question answers are exposed.

Incransom’s Publicly Known Track Record

Public reporting attributes the incransom Ransomware Group with emerging in late 2023. The group has targeted hospitals, schools, and small-to-medium businesses across the United States and Europe. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by claimed exfiltration of sensitive files, deployment of encryption, and then dual extortion: demanding payment to decrypt systems and threatening to publish the stolen data if the ransom is not paid. Notable prior victims include other educational institutions and healthcare providers, though exact success rates are difficult to verify from leak-site data alone.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the Emperor’s College leak connects to.
• Rotate the password used at Emperor’s College anywhere it is reused and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which often become the next link in doxxing chains after credential leaks like this one.
• Let remediation specialists handle takedown requests for any personal information already appearing on data-broker or paste sites tied to the incident.

The Emperor’s College breach is a reminder that educational and medical institutions remain high-value targets whose leaks can affect entire families for years. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and 100-plus platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident and future ones can exploit.