Fedcap Listed by ransomhouse Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Fedcap was listed by the RansomHouse ransomware group on December 10, 2025, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may have been affected; check with Fedcap to determine if your information was involved and take appropriate protective steps.
People connected to Fedcap may have personal details at risk after the nonprofit was listed by the ransomhouse ransomware group on December 10, 2025. The listing states that internal files were taken, though the number of individuals affected is not known.
Nonprofits that assist people facing economic barriers routinely collect and store sensitive records, so any confirmed exposure can affect clients, staff, and partners in concrete ways.
Inside the incident
The only public information available is the December 10, 2025 listing by ransomhouse. It claims internal files were exfiltrated during a ransomware attack. No details on when the intrusion occurred, how many records were involved, or the method used have been released.
Who is ransomhouse?
Ransomhouse is a ransomware operation that targets organizations, encrypts systems, and removes data before demanding payment. The group maintains a leak site where it lists victims and posts samples or claims of stolen material when negotiations fail or to increase pressure.
Who is Fedcap?
Fedcap is a nonprofit founded in 1935 and based in New York City. It provides job training, placement, and support services for individuals who encounter obstacles to employment and economic stability. Organizations of this type maintain records on clients, employees, donors, and program partners.
What was likely exposed
The listing refers only to internal files taken in a ransomware attack. The exact categories of data contained in those files have not been disclosed.
Why it matters
Internal files at a service organization can include personal identifiers, contact details, employment histories, and program participation records. Unauthorized access to such material can lead to identity misuse, unwanted contact, or other privacy harms for the people served by Fedcap. The organization itself may face operational disruption and loss of confidence from those it supports.
Were you affected?
Anyone who has received services from Fedcap or worked with the organization should watch for direct notices from the nonprofit. Checking personal accounts for unusual activity and using available breach-search tools are standard next steps.
- Contact Fedcap to ask whether your information is among the files referenced in the listing
- Monitor bank, credit, and benefits accounts for unexpected changes
- Run a free exposure scan of your email address against known breach data
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
[Internal database pack 4] Warren County Sheriff’s Office Listed by ransomhouse Ransomware GroupLawsoft Listed by ransomhouse Ransomware GroupThe Plainview Volunteer FD Listed by ransomhouse Ransomware GroupPrince George County Listed by ransomhouse Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Fedcap Listed by ransomhouse Ransomware Group →
Publicly posted by ransomhouse — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.