NBS Canada Listed by sinobi Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The sinobi ransomware group listed NBS Canada on its leak site on December 18, 2025. The entry states that internal files were exfiltrated during a ransomware attack against the Network of Biblical Storytellers Canada, a national association that supports biblical storytelling through workshops, festivals, and training resources. The number of people affected and the full scope of the intrusion have not been made public.

What happened

The incident is limited to the public listing of NBS Canada by the sinobi group and the assertion that internal files were removed from the organization’s systems. No further details on the date of the intrusion, the volume of data taken, the encryption of systems, or any ransom demand have been released by either the group or the organization.

Inside sinobi

Sinobi is a ransomware operator that maintains a public leak site to list organizations it claims to have targeted. Groups of this type commonly combine file encryption with data exfiltration, then use the threat of publication to pressure victims. The listing of NBS Canada follows the group’s established pattern of naming entities on its site after an attack, though the accuracy of any specific claim remains unverified beyond the group’s own statements.

NBS Canada and its sector

NBS Canada functions as a nationwide association of Canadian Christians focused on the oral performance of biblical texts. It runs workshops, an annual Festival of Biblical Telling, and distributes resources for both individual practitioners and congregations. Like many small non-profit and faith-based groups, it maintains records connected to event participants, members, and day-to-day operations.

What was likely exposed

The only data category named in the listing is internal files. The precise contents of those files have not been disclosed. Organizations of this type typically hold contact details for workshop attendees, registration records, and administrative documents, but it is not confirmed whether any personal or sensitive information was among the material removed.

Why it matters

Even limited exposure of internal files can create operational strain for a small national association and raise privacy questions for anyone whose information appears in those records. Individuals may face follow-on risks such as unsolicited contact or attempts to leverage any extracted details. The organization must now address system recovery and communications with its community without Reported Details on the extent of the loss.

Were you affected?

People who have attended NBS Canada events or used its resources can check for unusual account activity and consider enabling additional verification steps on any linked services. A free exposure scan of an email address against known breach data provides one practical way to assess whether personal information has appeared in public listings from incidents of this kind.

AICompiled with AI assistance from public sources and published under our editorial standards.