Now-Forward Non-Profit Breached by CMD Group: What Was Reportedly Exposed & What To Do

On May 26, 2026, a data breach at Now-Forward (ndsm.org) was publicly listed. The Texas-based non-profit, which provides emergency assistance such as food, clothing, rent support, and medical care to low-income families, had personal information and client records named among the data types exposed. The number of people affected and the overall scale of the incident remain unknown. Incidents of this kind continue to surface across sectors that store personal and service-related records, underscoring the persistent exposure of organizations that handle sensitive client data.

Inside the incident

The breach was discovered and listed on May 26, 2026. No further details on the method of access, the volume of records involved, or confirmation of the number of individuals affected have been made public.

How a breach like this happens

Incidents affecting organizations that maintain client databases frequently begin with external actors gaining unauthorized entry through common technical pathways. These can include unpatched software vulnerabilities, stolen or reused credentials, or misconfigured access controls that allow data to be copied or published without authorization. The precise sequence in any single case is often confirmed only after forensic review, which has not been released here.

Now-Forward (ndsm.org) and its sector

Now-Forward operates as an interfaith non-profit in Texas, delivering short-term aid to low-income households. Organizations in this sector routinely collect and store records to verify eligibility for assistance programs, coordinate services, and comply with funding requirements. A breach at such an entity is consequential because the data supports vulnerable populations who may have limited resources to respond to subsequent misuse of their information.

What data was at risk

The listing named personal information and client records as exposed. Organizations of this type typically hold details such as names, contact information, household composition, income documentation, and service histories required to administer aid. The exact contents and completeness of the exposed material have not been confirmed beyond those categories.

What's at stake

Individuals whose records appear in such incidents face the possibility that their details could be used for identity-related activity or targeted solicitations. For the organization, the event may prompt reviews of access controls, notification obligations, and relationships with funders or partner agencies that rely on the same data systems.

Were you affected?

Begin by monitoring official communications from Now-Forward for any direct notifications. Individuals can also review account statements and credit reports for unexpected activity. A short set of initial actions includes:

• Changing passwords on any accounts linked to the organization
• Enabling multi-factor authentication where available
• Running a free exposure scan of your email address against known breach data

AICompiled with AI assistance from public sources and published under our editorial standards.