Rotary Club Listed by fulcrumsec Ransomware Group

On May 1, 2026, the fulcrumsec ransomware group added the Rotary Club to its public leak site, confirming that internal files had been exfiltrated from the global humanitarian organization during a ransomware attack.

Confirmed Facts from Reporting

Public reporting indicates that fulcrumsec claims to have stolen internal documents from Rotary International, the 121-year-old service organization with more than 35,000 clubs and 1.4 million members across over 200 countries. The group posted evidence on its dark-web leak page hosted at an onion address, though the exact volume and specific types of files remain unclear from available screenshots and listings. No confirmed member count or exact list of exposed data fields has been released by either the attackers or the organization as of this writing. The incident follows the group’s typical pattern of publishing a sample of stolen material after an initial extortion window passes.

Why This Matters for You and Your Family

Even though the primary target was a large nonprofit, ordinary people like you and your family are often affected when organizations you belong to suffer breaches. Internal files frequently contain membership rosters, donor records, email addresses, phone numbers, home addresses, and payment details. If your Rotary club, local chapter, or any affiliated group stored your information digitally, that data may now sit in the hands of criminals. Once leaked, these details do not disappear. They circulate on underground forums and become building blocks for identity theft, phishing campaigns, and harassment that can reach your doorstep months or years later.

The Doxxing and Identity-Chain Implications

Ransomware leaks like this one rarely stop at a single dataset. Criminals routinely cross-reference newly obtained member lists with other breached records to build detailed profiles. A phone number from the Rotary files can link to your children’s school accounts, your spouse’s workplace directory, or family social-media handles. These connections create doxxing chains that expose far more than the original breach suggested. Credential leaks cascade into account takeovers, especially on gaming platforms where children often reuse email addresses or passwords tied to family identities. What begins as an organizational breach can quickly become personal when attackers map relationships between your email, phone, username, and real-world address.

Fulcrumsec Group Track Record

Public reporting attributes fulcrumsec with emerging in late 2024 as a double-extortion ransomware operation. The group has listed schools, healthcare providers, and nonprofit organizations among its prior victims. Its standard playbook involves gaining initial access through phishing or exploited remote desktop protocols, exfiltrating sensitive files before deploying encryption, then demanding payment while threatening to publish the data on its leak site if the ransom is not paid. The group typically provides a short negotiation window before uploading samples and eventually the full archive. Exact success rates and total victims are difficult to verify, but its consistent appearance on ransomware tracking sites shows it remains an active threat.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what the Rotary breach may have exposed about you.
• Rotate any password you used for Rotary-related accounts or email addresses anywhere it is reused, and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next time your information appears it is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become targets when credential leaks create doxxing chains.
• Let remediation specialists handle takedown requests for any exposed personal records that surface on data broker sites or underground marketplaces.

The Rotary incident illustrates how quickly organizational data can become personal exposure. Taking deliberate steps now limits how far criminals can travel down the identity chain created by this and future leaks. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to cascading takeovers. Start protecting what matters most before the next breach surfaces.