Council for Relationships Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Council for Relationships, a behavioral-health organization that provides therapy and clinician training, was listed by the ransomware group 8base in mid-April 2024. Public reporting indicates that internal files were exfiltrated during a ransomware attack; the number of people affected and the precise contents of those files remain undisclosed.

Because the organization works with individuals and families on sensitive relationship and mental-health matters, any exposure of internal records carries clear privacy and safety implications. What follows is a factual account of what is known so far, drawn only from the reported details and established public background on the actors involved.

What happened

On or around 15 April 2024, Council for Relationships appeared on the leak site operated by the 8base ransomware group. The listing asserts that the group conducted a ransomware attack against the organization and exfiltrated internal files. No further technical details—such as the initial access method, the duration of unauthorized access, or whether encryption was successfully deployed—have been made public. The number of individuals whose data may have been involved is unknown, and no independent confirmation of the group’s claims has been released by the organization or by law-enforcement sources at the time of reporting.

In short, the publicly available record consists of a single claim by 8base that it stole internal files from Council for Relationships. Everything else about the incident’s scale, timeline, and technical execution remains undisclosed.

Who is 8base?

8base is a ransomware operation that emerged in public view in 2022–2023 and has since been documented by multiple cybersecurity researchers. The group typically follows a double-extortion model: after gaining access to a victim’s network, it steals data, encrypts systems, and then threatens to publish the stolen material on a dedicated leak site if a ransom is not paid. Listings on that site often include sample files and countdown timers, though the presence of a listing does not by itself prove that every claimed file set is authentic or complete.

Public reporting has linked 8base to attacks against organizations across healthcare, professional services, and other sectors. The group’s communications are usually limited to the leak-site posts themselves; it does not routinely issue detailed press statements. In the present case, the only assertion attributed to 8base is that it exfiltrated internal files from Council for Relationships. That claim has not been independently verified in the available record.

Who is Council for Relationships?

Council for Relationships is a nonprofit behavioral-health organization whose stated mission is to help people improve important relationships through therapy, to train clinicians in the family-systems approach, and to advance the field through research. Its work routinely involves counseling individuals, couples, and families, as well as educating mental-health professionals. Organizations of this type typically maintain clinical notes, intake forms, contact details, billing records, and training materials—categories of information that are both personal and regulated under privacy laws such as HIPAA in the United States.

A breach involving such an organization is consequential precisely because the data it holds can reveal intimate details of clients’ emotional lives, family dynamics, and treatment histories. Even if the exact files taken remain unconfirmed, the nature of the work means that any unauthorized disclosure carries elevated risk of embarrassment, discrimination, or further targeting of vulnerable people.

What was likely exposed

The only data type named in the public report is “internal files exfiltrated in a ransomware attack.” No inventory of those files, no file counts, and no confirmation of specific record types have been released. Because Council for Relationships provides therapy and clinician training, organizations in this sector commonly hold:

• Client contact and demographic information
• Clinical notes, assessments, and treatment plans
• Billing and insurance records
• Staff and trainee personnel files
• Internal administrative and research documents

Whether any or all of these categories were among the files claimed by 8base is unconfirmed. Readers should treat the group’s assertion as an unverified claim until the organization or independent investigators provide further detail.

What's at stake

For individuals who have received services from Council for Relationships, the primary risk is the possible exposure of highly personal information. Even limited clinical or contact data can be used for targeted phishing, identity theft, or social engineering that exploits knowledge of a person’s family or mental-health situation. Emotional distress and loss of trust in care providers are also real, if less tangible, consequences.

For the organization itself, the stakes include regulatory scrutiny, potential notification obligations under privacy statutes, reputational harm, and the operational cost of investigation and remediation. Because the number of affected people is unknown, the full scope of these impacts cannot yet be quantified. The absence of Reported Details does not eliminate the risk; it simply means that both individuals and the organization must proceed on the basis of incomplete information.

Were you affected?

If you have been a client, trainee, or staff member of Council for Relationships, treat the possibility of exposure seriously even though exact numbers and file lists remain undisclosed. Practical first steps include monitoring financial and medical accounts for unusual activity, enabling multi-factor authentication on email and other accounts, and being alert to unsolicited messages that reference personal or clinical details. You may also wish to request a free credit freeze or fraud alert from the major credit bureaus if you believe sensitive identifiers could have been involved.

Readers can run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Such a scan will not confirm or rule out involvement in this specific incident, but it can surface other exposures that warrant attention. Continue to watch for official statements from Council for Relationships; any confirmed notification will provide the most reliable guidance on next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.