hohmartin.org Listed by INC Ransom Ransomware Group

On November 9, 2025, the nonprofit House of Hope of Martin County appeared on the leak site of the ransomware group Incransom. The organization, which assists more than 30,000 individuals each month with food, housing, financial aid, and education programs, is claimed to have had internal files exfiltrated during a ransomware attack.

What Public Reporting Shows

Public reporting indicates that Incransom listed hohmartin.org and published a sample of the stolen data. The exposed materials consist of internal files rather than a structured database of client records. No exact victim count has been confirmed, and it remains unclear whether donor lists, staff records, or case-management documents were included. The incident follows the group’s standard pattern of encrypting systems, exfiltrating data, and later posting samples when ransom demands go unmet.

Why This Matters for You and Your Family

When a local nonprofit that helps families with rent, groceries, and utility bills suffers a breach, the ripple effects reach the very people it serves. Employee records, donor information, or client intake forms can contain names, addresses, phone numbers, dates of birth, and Social Security numbers. Once that information leaves the organization’s control, it can appear on dark-web markets within days. For any family that has sought help from House of Hope or similar charities, the breach creates a fresh risk that personal details could be combined with other leaks to build a complete profile.

Credential leaks like this one often cascade into account takeovers on email, banking, or government portals. Children’s school records or gaming accounts tied to a parent’s email can become entry points for further harassment or identity theft.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at posting a single sample. They frequently sell or publish full archives that allow criminals to link an email address from a nonprofit donor list to usernames on social media, gaming platforms, and shopping sites. This identity-chain process turns one breach into dozens of targeted attacks. A phone number listed in a charity’s volunteer file can be matched to a child’s Roblox or Fortnite account that uses the same password, leading to doxxing, swatting, or extortion attempts against the entire household.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom with emerging in late 2023. The group has targeted hospitals, schools, local governments, and nonprofits. Its typical playbook begins with phishing or exploited remote-access tools to gain initial access, followed by lateral movement to exfiltrate sensitive files before deploying ransomware. When payment is refused, the group posts increasingly large data samples on its leak site and pressures victims through direct contact with affected individuals or media outlets.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then complete the cleanup of exposed data.
• Rotate any password you used at House of Hope of Martin County or any related service, and switch on 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The House of Hope breach is a reminder that even organizations you trust with sensitive family information can be hit without warning. Taking concrete steps now limits how far criminals can travel down the identity chain that begins with this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts—protection that directly addresses the cascading risks shown in incidents like this one.