Southern Alberta Community Living Association Listed by INC Ransom Ransomware Group

On January 18, 2026, the Southern Alberta Community Living Association appeared on the leak site of the ransomware group known as incransom. The nonprofit organization, which supports individuals with disabilities through personalized services, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, anyone who has received services from SACLA, shared personal details with them, or has a family member in their programs could be affected.

What Public Reporting Shows

Public reporting indicates that incransom listed SACLA on its disclosure page and claimed to have taken internal files. The association, founded in 1980, provides individualized supports aimed at helping people with disabilities achieve personal goals and build community connections. Available reporting describes the data as internal files, though specific types of records have not been detailed in initial disclosures. No confirmed victim count has been released, and the precise date of the initial breach has not been made public beyond the January 18 leak-site posting.

Why This Matters for You and Your Family

When a community organization like SACLA suffers a breach, the impact reaches ordinary families who trusted it with sensitive information. Internal files often contain names, addresses, dates of birth, medical or support details, and contact information for both the individuals receiving services and their family members. If your household has ever worked with SACLA, your data may now sit in a ransomware group’s hands, available to criminals who buy or trade it. This kind of exposure can lead to identity theft, targeted scams, or unwanted contact long after the initial incident fades from news headlines.

The Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one organization. Criminals frequently use stolen internal files to map connections between names, emails, phone numbers, and online handles. These identity chains can reveal family relationships, children’s information, and even gaming accounts that reuse the same passwords or recovery emails. Once criminals link your real identity to an online handle, they can pursue doxxing, account takeovers, or extortion. Credential leaks like this one regularly cascade into gaming account compromises for both adults and children, turning a single breach into a chain of further exposures across social media, email, and gaming platforms.