Kinsmen TeleMiracle Listed by pear Ransomware Group

On May 19, 2026, the Kinsmen TeleMiracle charity appeared on the leak site of the pear ransomware group. The organization, which runs an annual telethon to support the Kinsmen Foundation, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates the number of people whose information was exposed remains unknown.

Reported Details from Reports

Available reporting describes the incident as a ransomware attack in which attackers gained access to the charity’s systems, encrypted data, and later published proof of exfiltration on their dedicated leak page. The primary source is the pear group’s onion site, indexed by ransomware.live. No confirmed total of records or specific victim count has been released. The exposed material consists of internal files rather than a clearly defined database of donor or patient information. As of the publication date on the leak site, the charity had not issued a detailed public statement on the precise data categories involved.

Why This Matters for You and Your Family

When a charity like TeleMiracle is breached, ordinary donors, volunteers, sponsors, and local families are often the ones affected. Your name, address, phone number, email, or donation history may sit inside the internal files now circulating on dark-web forums. Once that information leaves the organization’s control, it can be sold, traded, or used to launch further attacks against you. Credential leaks from one nonprofit can cascade into personal email accounts, banking logins, or children’s online profiles. For many families, this single breach becomes the starting point for identity theft, phishing campaigns, or unwanted contact that lasts months or years.

The Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at the initial leak. They frequently cross-reference stolen internal files against other breach repositories to build detailed profiles. A donor email found in the TeleMiracle files can be linked to a reused password from an earlier breach, a child’s gaming username, or a family member’s social-media handle. These connections create an identity chain that turns a simple donation record into a roadmap for doxxing, account takeovers, or targeted extortion. Public reporting indicates that families whose data appears in charitable breaches often face follow-on harassment because attackers know the emotional pressure points—children’s activities, medical causes, or community involvement.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the included cleanup of data broker listings tied to the breach.
• Rotate any password you ever used with the Kinsmen TeleMiracle organization or its related systems, and enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure of your information is flagged within hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that frequently chain back to the same family address or parent email.
• Let remediation specialists handle ongoing takedown requests for any personal records that surface from this incident or related data sales.

The pear group’s appearance with TeleMiracle data is a reminder that even organizations supporting good causes can become gateways to personal exposure. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts—protection that proves especially relevant when credential leaks like this one spread into account takeovers and doxxing attempts.