NADAP Listed by genesis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

A non-profit organization called NADAP was listed by the genesis ransomware group on March 07, 2026. The listing states that internal files were exfiltrated during a ransomware attack, though the number of people affected and the precise contents of any data remain unknown. The incident raises practical questions for individuals whose records may have been held by the organization, including clients, employees, or program participants who provided personal information in the course of receiving services.

Breaking down the breach

The only confirmed detail is the March 07, 2026 listing itself. No information has been released on the timing or method of the intrusion, the volume of data taken, or whether any files were later published. The organization has not issued a public statement confirming or disputing the claim, and the number of individuals potentially impacted is not disclosed.

Who is genesis?

Genesis is a ransomware group that publicly lists organizations on its leak site after claiming to have encrypted systems and removed data. Such groups typically demand payment in exchange for decryption keys and threaten to release stolen material if demands are not met. Their listings constitute claims by the group; independent verification of the underlying access or data volume is not available from the listing alone.

Who is NADAP?

NADAP operates as a non-profit organization. Entities in this sector commonly maintain records related to program participants, donors, staff, and administrative functions. A breach at such an organization can affect people who have limited ability to control how their information is stored once it has been provided for services or benefits.

The information in question

The listing refers to internal files exfiltrated in a ransomware attack. No further breakdown of file types or specific data categories has been provided. The exact scope of any personal or sensitive information contained in those files is therefore unconfirmed.

What's at stake

Individuals connected to NADAP may face risks associated with the exposure of internal records, such as identity misuse or unauthorized access to accounts if login credentials or personal identifiers are present. For the organization, the incident adds operational disruption and potential regulatory or reputational consequences typical of ransomware events involving non-profits that handle client or employee data.

If your data was in this claimed breach

People who have interacted with NADAP can take standard protective steps while waiting for any official notification from the organization.

• Review recent account statements and credit reports for unusual activity.
• Change passwords for any accounts linked to the organization and enable multi-factor authentication where available.
• Remain alert for unsolicited contact that references NADAP or requests verification of personal details.
• Run a free exposure scan of your email address against known breach data to check for appearances in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.