jubileejobs.org Listed by INC Ransom Ransomware Group

On June 2, 2025, the nonprofit organization Jubilee Jobs appeared on the leak site of the ransomware group Incransom. The organization, which helps Washington, DC-area jobseekers overcome barriers such as former incarceration, substance abuse, learning disabilities, and limited work history, had internal files exfiltrated during a ransomware attack.

What Public Reporting Shows

Public reporting indicates that Jubilee Jobs, one of the longest-serving workforce development nonprofits in the Greater Washington Region, had its internal documents posted to the Incransom leak site. The exact number of individuals whose information may have been exposed remains unknown. Available details confirm that the data consists of internal files rather than a structured database of client records, though the specific contents have not been independently verified by third parties.

The incident follows the group’s typical pattern of exfiltrating data before encrypting systems and then publishing samples when demands are not met. No public timeline has been released detailing when Jubilee Jobs was initially compromised or when the exfiltration occurred.

Why This Matters for You and Your Family

When a nonprofit like Jubilee Jobs suffers a breach, the people most likely to be affected are those who already face significant challenges: individuals seeking help with employment after incarceration, those recovering from addiction, or families trying to escape public assistance. If you or someone in your family has used these services, your personal information may now sit in files that criminals can search, sell, or weaponize.

Internal files from such organizations often contain names, addresses, dates of birth, employment histories, phone numbers, email addresses, and case notes. Once exposed, this information rarely stays contained. It can appear on dark-web marketplaces within weeks, giving identity thieves, stalkers, or scammers a head start on targeting you or your loved ones.

The Doxxing and Identity-Chain Implications

Leaked internal files frequently create long identity chains. A single document might link your real name to an email address, which in turn connects to a username used on job boards, government portals, or children’s gaming accounts. Attackers follow these links to build complete profiles that enable everything from spear-phishing to full account takeovers.

Credential leaks like this one cascade into gaming account compromises, especially for households where children use family email addresses or shared phones for Fortnite, Roblox, or Discord. What begins as a nonprofit breach can end with a child’s gaming profile doxxed, leading to harassment, swatting, or further extortion attempts against the entire household.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom with emerging in late 2023. The group has targeted hospitals, schools, local governments, and nonprofits. Its playbook typically involves initial access through phishing or exploited remote desktop protocols, followed by claimed exfiltration of sensitive files, deployment of ransomware, and public extortion via leak sites when victims refuse payment. Notable prior victims include healthcare providers and educational institutions, though exact success rates remain unconfirmed by independent analysis.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what appears.
• Rotate any password you ever used at Jubilee Jobs or similar services anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing accounts and talking with family members whose data may have been exposed.

The most important step is acting before criminals stitch your information into a complete profile. Start your DoxxScan trial today and let its AI-powered identity-chain mapping plus hands-on remediation by specialists protect you and your family, including any gaming accounts that could otherwise become the next link in a doxxing chain. Jubilee Jobs continues its important work; protecting the privacy of the people it serves now falls to each of us.