On February 6, 2025, the qilin ransomware group added Penderels Trust to its leak site, claiming that internal files had been exfiltrated from the UK charity that supports people with disabilities.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Penderels Trust
Get alerted the next time Penderels Trust files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Penderels Trust’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the incident is a ransomware attack in which attackers gained access, encrypted systems, and exfiltrated data before publishing a sample on their onion site. The exact number of people whose records were taken remains unknown. Available reporting describes the exposed material as internal files rather than a structured database of customer records. Penderels Trust provides advice, guidance, and practical solutions that help individuals with disabilities live independently, achieve personal goals, and participate actively in their communities. The organisation has not yet published a detailed statement on the volume or sensitivity of the stolen data.
Why This Matters for You and Your Family
When a charity like Penderels Trust suffers a breach, the people who rely on its services can find their personal details in the hands of criminals. Internal files often contain names, addresses, phone numbers, email accounts, support notes, and financial details tied to benefit claims or grants. If your family has ever used similar disability support organisations, your information may already sit in overlapping records held by multiple providers. A single leak can give attackers the starting point they need to impersonate you, file fraudulent claims, or sell your details on underground forums. For families supporting a disabled child or adult, the consequences reach beyond inconvenience: stolen identity details can disrupt benefit payments, medical appointments, or housing support at the worst possible time.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one organisation. Attackers frequently cross-reference the fresh data against earlier breaches to build detailed profiles. A phone number listed in Penderels Trust files can be linked to your email address from an earlier breach, then to a username used on social media or gaming platforms. This identity chain turns a simple support record into a roadmap for doxxing, targeted phishing, or account takeovers. Credential leaks like this one cascade into gaming accounts belonging to you or your children, where stolen logins are tested across Steam, Roblox, Fortnite, and other services. Once an attacker controls a family gaming account, they can harvest chat logs, linked email addresses, and even home addresses shared during friendly conversations, lengthening the chain further.