Franciscan Friars of the Atonement Listed by dragonforce Ransomware Group

On July 2, 2024, the Franciscan Friars of the Atonement appeared on the leak site operated by the dragonforce ransomware group. The religious order, based in New York, was listed after attackers claimed to have exfiltrated internal files during a ransomware incident. The disclosure does not specify how many individuals are affected or exactly which records were taken.

Details from the Leak Site

The primary listing on the dragonforce leak portal, archived via ransomware.live, states that internal files were exfiltrated in a ransomware attack. No sample data has been published publicly at the time of writing, and the entry does not quantify the volume or type of documents beyond describing them as internal files. The notification leaves open whether donor records, employee personnel files, or correspondence involving laypeople who interact with the order were included. Public reporting on similar dragonforce postings indicates that when samples eventually appear they often contain spreadsheets, PDFs, and email archives.

Why This Matters for You and Your Family

Even though the victim is a religious community, many ordinary people entrust personal information to such organizations. If you have ever made a donation, attended a retreat, enrolled a child in a program, or worked with the Franciscan Friars of the Atonement, your name, address, phone number, email, or financial details could be among the stolen material. Internal files exfiltrated July 2024 can easily contain years of accumulated records that link families to the order. Once those records leave the victim’s control, they circulate in criminal ecosystems where buyers look for identities to impersonate, pressure, or resell.

Doxxing and Identity-Chain Risks

Stolen internal files rarely stay isolated. A single email address or phone number found in the leak can be cross-referenced with credential-stuffing databases, public records, and social-media handles. Attackers then build an identity chain that reveals where you live, where your children go to school, and which online accounts you control. Gaming accounts belonging to teenagers are especially vulnerable because kids often reuse passwords or email addresses tied to family donations or church registrations. That linkage turns a breach that feels distant into a direct route for account takeover, harassment, or identity theft targeting your household.

Dragonforce’s Known Track Record

Public reporting attributes the dragonforce ransomware group’s first major activity to late 2023. The group has since listed schools, manufacturers, healthcare providers, and nonprofit organizations. Their typical playbook begins with initial access gained through phishing or exploited remote desktop credentials, followed by rapid exfiltration of documents before encryption. Extortion follows a double-pressure model: demands for ransom to prevent file publication and, in some cases, direct contact with affected individuals or partners. The dragonforce leak site functions as both a shaming platform and a marketplace for the stolen data when victims refuse to pay.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any past connection to the Franciscan Friars of the Atonement.
• Rotate passwords used for any account tied to the order or any reused credential, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts often chained to the same contact details.
• Let remediation specialists handle takedown requests for any exposed personal documents that surface on data-broker or extortion sites.

The incident underscores that ransomware leaks now touch everyday lives far beyond corporate boardrooms. One breach can start a chain of exposure that lasts for years unless you act quickly and systematically. Start your DoxxScan trial today and let its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage—including children’s gaming accounts—work to protect you and your family.