First United Methodist Church Boerne Listed by interlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Breaking down the breach

The only confirmed public record of the incident is the May 11, 2026, listing on the interlock site. That entry asserts that files were taken from the church but supplies no file counts, timelines for the intrusion, or details on how access was obtained. No statement from the church addressing the listing or describing its own investigation has been issued. Because the scale of any exfiltration is not disclosed, the number of individuals whose information may be involved cannot be determined from available records.

The group behind it: interlock

Interlock is a ransomware operation that uses encryption of victim systems followed by publication of stolen material on a dedicated leak site when ransom demands are not met. The group follows the pattern of other ransomware actors by naming organizations on its site to pressure payment. Its listing of First United Methodist Church Boerne constitutes the group’s claim; no separate evidence verifying the contents or authenticity of the posted material has been released.

Who is First United Methodist Church Boerne?

First United Methodist Church Boerne is a local religious congregation that runs programs for preschool, children, youth, and adults. Organizations of this type routinely collect and store contact details, family information, and financial records connected to members, staff, volunteers, and program participants. A breach at such an institution can expose data that individuals have shared in a setting they expect to be private.

The information in question

The interlock listing claims that phone numbers, email addresses, home addresses of staff, parishioners, and children, along with financial and other confidential documents, were taken. The only fact stated outside the group’s description is that internal files were exfiltrated. The precise categories and volume of data remain unconfirmed by any other source.

The real-world impact

Exposure of contact information and financial documents can lead to increased unsolicited communications, attempted fraud, or misuse of personal identifiers. For a church, the presence of data on minors adds a layer of sensitivity, though the extent of any such records is not verified. The organization itself faces potential costs for investigation, notification, and system restoration, regardless of whether the group’s claims are later substantiated.

Were you affected?

Individuals who have attended programs or provided information to First United Methodist Church Boerne can monitor their email accounts and financial statements for unusual activity. They may also request information directly from the church about any notifications it issues. A free exposure scan of an email address against known breach data sets can indicate whether the address has appeared in previously published records.

AICompiled with AI assistance from public sources and published under our editorial standards.