Queens Center For Change Listed by sinobi Ransomware Group

On June 15, 2025, the Queens Center for Change, a New York behavioral counseling provider, appeared on the leak site of the sinobi ransomware group. The organization, which offers counseling for problematic sexual behaviors, sexual offenses, batterers, anger management, bias crimes, animal cruelty education, and DWI evaluations, is claimed to have had internal files exfiltrated during a ransomware attack. Clients, former clients, and staff whose sensitive personal and health-related records were stored in those systems may now face heightened risks of identity theft and doxxing.

What's Publicly Reported from Reporting

Public reporting indicates that internal files were exfiltrated from Queens Center for Change networks. The agency, led by licensed clinical social workers Larry Menzie and Lillian Passoni, each with more than 25 years of experience, specializes in court-mandated and voluntary behavioral health programs. No exact victim count has been released, and the precise volume or types of records exposed beyond “internal files” remains unclear from available reporting. The listing on the sinobi leak site states the data was stolen and is now being used as leverage.

Why This Matters for You and Your Family

When a counseling center that handles deeply personal matters such as sexual offenses, domestic violence, or substance-related evaluations is breached, the stakes are immediate. Exposed internal files can contain names, addresses, dates of birth, Social Security numbers, insurance details, session notes, court documents, and family member information. For you or your family, this means potential misuse ranging from fraudulent loans opened in your name to targeted harassment based on private behavioral health history. Children or teens whose records appear through family counseling or related services are especially vulnerable because their information often links back to parental identities and home addresses.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one database. Attackers frequently cross-reference stolen counseling records with other breaches to build detailed profiles. A single leaked email or phone number can connect gaming usernames, social media handles, family addresses, and school records. This creates an identity chain that turns a counseling breach into long-term doxxing material. Public reporting describes how such cascades lead to account takeovers on gaming platforms, harassment campaigns, and resale of full identity packages on underground forums. Credential leaks like this one cascade into account takeovers and doxxing chains, which is why protecting both adult and children’s gaming accounts matters.

Sinobi Ransomware Group Track Record

Public reporting attributes the sinobi ransomware group with operations that emerged in recent years targeting mid-sized organizations across healthcare, education, and social services. Notable prior victims include other U.S. behavioral health providers and small medical practices. Their typical playbook involves initial access through phishing or exploited remote desktop credentials, followed by exfiltration of sensitive internal files, then publication on their leak site with extortion demands. The group posts samples and deadlines on dark-web leak pages to pressure victims into payment, a pattern consistent with the Queens Center for Change listing.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains back to the Queens Center for Change records.
• Rotate any password you used at the counseling center or related services anywhere it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parental credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts and talking with affected family members.

The incident shows how quickly personal behavioral health data can move from a private counseling file to a public extortion page. Taking concrete steps now limits how far that chain can extend. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of what others can find about you and your family.