Mount St. Mary's Seminary Listed by rhysida Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Mount St. Mary's Seminary was listed by the rhysida ransomware group on or around November 06, 2023, according to public reporting of the group's leak-site activity. The listing asserts that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and broader technical details of the incident have not been publicly confirmed.

For an institution dedicated to preparing candidates for the Catholic priesthood, any unauthorized access to internal systems raises practical concerns about the confidentiality of records and the trust placed in the organization by students, staff, clergy, and families. What is known so far is limited to the group's claim and the reported nature of the data involved.

What happened

Public reporting indicates that Mount St. Mary's Seminary appeared on a rhysida ransomware leak site, with the incident noted as of November 06, 2023. The available summary states that internal files were exfiltrated in a ransomware attack. No confirmed figures have been released for the volume of data taken, the precise date of intrusion, the initial access method, or whether systems were encrypted in addition to data theft. The number of individuals potentially affected is listed as unknown. Beyond the leak-site claim itself, independent verification of the full scope has not been detailed in the information available.

Inside rhysida

Rhysida is a ransomware operation that became publicly active in 2023. Like many contemporary groups, it has typically relied on double-extortion tactics: encrypting systems where possible while also copying data and threatening to publish it if a ransom is not paid. The group maintains a dark-web leak site on which it names organizations and, in some cases, posts samples or larger archives of stolen files. Rhysida has been observed targeting a range of sectors, including education, healthcare, and other institutions that hold sensitive personal or operational records. Listings on such sites represent claims by the actors; they do not by themselves constitute independent confirmation of every asserted detail. In this instance, the group claims Mount St. Mary's Seminary as a victim and asserts that internal files were taken. No further specific statements by rhysida about this particular organization are included in the reported facts.

About Mount St. Mary's Seminary

Mount St. Mary's Seminary is described as the oldest division of the Athenaeum. Its stated mission is the preparation of candidates for the Catholic priesthood through an integrated approach to formation. Seminaries of this kind typically operate as specialized educational and formational institutions within the Catholic Church. They commonly maintain records related to applicants, seminarians, faculty, staff, academic progress, spiritual formation, health or counseling notes where applicable, financial aid, and administrative correspondence. Because the work involves discernment for ordained ministry, the data held can include highly personal information alongside ordinary institutional files. A breach affecting such an organization is consequential precisely because of the sensitivity of vocational and personal records and the expectation of confidentiality that surrounds priestly formation.

What was likely exposed

The facts name the exposed material as internal files exfiltrated in a ransomware attack. No itemized inventory of file types, databases, or record categories has been disclosed, and the number of people affected is unknown. Organizations of this type commonly hold personnel and student records, contact details, academic and formational evaluations, financial documents, and internal administrative correspondence. It is not confirmed which of these, if any, were among the files the group claims to have taken. Exact contents therefore remain unconfirmed; only the general characterization of “internal files” is stated in the available reporting.

The real-world impact

If internal files were copied, individuals whose information appears in those files could face risks that include unwanted contact, social engineering attempts, or misuse of personal details. For seminarians and applicants, exposure of formation-related or personal records could carry reputational or privacy consequences within tight-knit communities. Staff and faculty may encounter similar risks around employment or contact data. For the seminary itself, the incident can mean operational disruption, the cost of investigation and remediation, and the need to communicate carefully with those who may be affected. Because the scale and precise contents are undisclosed, the concrete impact on any given person cannot yet be measured from public information alone. The primary documented assertion remains the ransomware group’s claim that exfiltration occurred.

What to do if you're exposed

Anyone who has been associated with Mount St. Mary's Seminary—as a seminarian, applicant, employee, or family member—may wish to treat the report as a prompt for basic precautions. Monitor financial and email accounts for unusual activity, and be cautious of unexpected messages that reference the seminary or request personal information. Consider placing fraud alerts with credit bureaus if financial data could have been involved, and retain any official notices the institution may issue. Because the exact data taken has not been confirmed, these steps are precautionary rather than proof of individual compromise. Readers can also run a free exposure scan of their email addresses to check whether their information has already appeared in known breach datasets, which can help prioritize further monitoring.

AICompiled with AI assistance from public sources and published under our editorial standards.