On October 25, 2023, Two Saints appeared on the leak site operated by the noescape ransomware group. The UK-based charity, which provides outreach to people sleeping rough and supported accommodation across Berkshire, Hampshire, the Isle of Wight, Portsmouth and Southampton, may have had its internal files exfiltrated during a ransomware attack. The listing does not specify the number of people affected or detail the exact records involved.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Two Saints
Get alerted the next time Two Saints files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Two Saints’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details in the Leak-Site Posting
The noescape leak site states that Two Saints suffered a ransomware incident and that attackers successfully exfiltrated internal files before encryption. No sample data is publicly shown, and the posting does not quantify how many records were taken or name the specific systems accessed. The disclosure indicates the organisation was given a deadline to negotiate or face full publication of the stolen material. As of the listing date, the files had not yet been released to the public.
Internal files exfiltrated is the only description provided. The notification does not list exposed data types such as donor records, client personal information, staff payroll or contracts, leaving the precise scope unknown to outsiders.
Why This Matters for You and Your Family
When a charity like Two Saints is breached, the people it serves are often among the most vulnerable. Rough-sleepers, families in temporary accommodation and those receiving outreach support frequently share sensitive personal details to receive help. If those details reach criminals, the consequences reach far beyond the organisation itself. You or someone in your household could be affected even if you have never heard of Two Saints, because support-service records sometimes contain addresses, phone numbers, next-of-kin contacts and benefit information that travel with you long after the interaction ends.