真言宗智山派 成就院 Listed by tengu Ransomware Group

On February 18, 2026, the Japanese Buddhist temple Jōju-in was listed on the leak site of the tengu ransomware group. The temple, part of the Shingon-shū Chisan-ha sect and located in northern Tochigi Prefecture, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people affected remains unknown, any personal or operational records held by the temple may now be in the hands of attackers.

Reported Details of the Incident

Public reporting indicates that tengu Ransomware Group added Jōju-in to its leak site on February 18, 2026. The data consists of internal files exfiltrated following a ransomware deployment. No specific volume of records or list of exposed data types has been publicly detailed beyond the broad category of internal temple documents. The listing appears on the group’s onion site, which is tracked by ransomware monitoring services such as ransomware.live.

Why This Matters for You and Your Family

Even when a breach hits what seems like a quiet religious institution, the consequences can reach ordinary people. Temples often maintain donor lists, family memorial records, contact details, and sometimes copies of official documents for community members. If your name, address, phone number, email, or family information appears in those files, it can be reused elsewhere. Credential leaks like this one frequently cascade into account takeovers on personal email, banking, or social media. For families, the risk extends to children whose names or details might be included in community or educational records tied to temple activities.

The Doxxing and Identity-Chain Risks

Once internal files leave a secure environment, attackers and opportunistic criminals can link disparate pieces of information. A phone number from a donor record can be matched to a username on a gaming platform. An email tied to a family memorial can reveal home addresses. These connections create identity chains that lead to doxxing, harassment, or targeted scams. Public reporting shows that ransomware groups increasingly publish or sell such data precisely because it fuels follow-on crimes. What begins as a temple’s administrative file can become the starting point for long-term exposure of you and your family.

Tengu Ransomware Group’s Known Activity

Public reporting attributes the tengu Ransomware Group with operations that emerged in recent years. The group follows a typical double-extortion playbook: gaining initial access to networks, exfiltrating data before encrypting systems, and then threatening to publish the stolen files unless a ransom is paid. Notable prior victims have included various organizations across different sectors, though specific earlier incidents are still being catalogued by threat trackers. The group maintains a leak site where it posts samples or full datasets when targets refuse to pay.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains back to this incident.
• Rotate any password used at Jōju-in or related temple services anywhere it has been reused, and switch on two-factor authentication with an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure of your information is flagged within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes dependents and your children’s gaming accounts that often connect to the same addresses or parent emails.
• Let remediation specialists handle takedown requests for any exposed personal records that surface on data broker sites or forums.

The incident shows that no organization is too small or too traditional to escape digital threats. Taking concrete steps now can limit how far this claimed breach travels. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control over what attackers already hold.