Queens Center For Change Listed by sinobi Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target organizations that hold sensitive personal information, using data theft and public leak-site listings as leverage. In this landscape, smaller service providers in counseling and behavioral health have become frequent claims on such sites, raising concerns for clients whose records may be involved. On June 15, 2025, Queens Center For Change was listed by the sinobi ransomware group, which claimed that internal files had been exfiltrated in a ransomware attack. The number of people affected remains unknown, and public detail on the incident is limited.

The listing itself is an unverified claim by the group. For an organization that provides specialized behavioral counseling, any confirmed exposure of internal material would matter because of the highly personal nature of the work. This article sets out only what has been reported, places the claim in context, and outlines practical steps for anyone who may be concerned.

What happened

According to the available report dated June 15, 2025, Queens Center For Change was listed by the sinobi ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. No further public confirmation of the attack’s success, the method of intrusion, the exact timing of any compromise, or the volume of data involved has been disclosed. The number of people affected is unknown. Public detail beyond the leak-site listing and the description of exfiltrated internal files is limited.

Who is sinobi?

Sinobi is a ransomware operation that follows the now-common double-extortion model: encrypting systems while also stealing data and threatening to publish it if a ransom is not paid. Like other groups of this type, it maintains a leak site where it posts victim names and, in some cases, samples of stolen material to increase pressure. Public reporting on sinobi has described typical tactics that include initial access through phishing or exploited vulnerabilities, followed by lateral movement, data theft, and deployment of ransomware. The group’s listings are claims made by the actors themselves; they do not automatically constitute independent verification that a breach occurred or that every file claimed was taken. In this case, the listing of Queens Center For Change should be treated as an unverified claim by sinobi unless and until additional confirmation appears.

Queens Center For Change and its sector

Queens Center For Change, also referred to in available material as Queens Counseling for Change (QCC), provides behavioral counseling services. Services are delivered by licensed counselors and the agency is led by Larry Menzie, LCSW/R, and Lillian Passoni, LCSW/R, social workers with more than 25 years of experience. The organization offers a range of programs that include counseling related to problematic sexual behaviors, sexual offenses, batterers, anger management, bias crimes, animal cruelty education, and DWI evaluations only.

Organizations in this sector routinely handle highly sensitive clinical and personal information. Clients often seek help for matters that carry legal, social, and emotional weight. A ransomware claim against such a provider is therefore consequential: even the possibility that internal files left the organization can create lasting worry for people who entrusted the agency with private details. The sector as a whole has seen repeated targeting by ransomware groups precisely because the data held is difficult to replace and can be used for further harm if exposed.

What data was at risk

The report states that internal files were exfiltrated in a ransomware attack. No more specific inventory of data types—such as client names, clinical notes, contact details, financial records, or staff information—has been publicly disclosed. Organizations that provide behavioral counseling typically maintain case files, intake forms, treatment plans, progress notes, and related administrative records. Whether any of those categories were among the files claimed by sinobi remains unconfirmed. Exact contents of any exfiltrated material are therefore unknown at this time.

The real-world impact

For individuals who have received services from Queens Center For Change, the primary risk is the potential exposure of sensitive personal and clinical information. Even without a confirmed list of affected people, the nature of the services means that any leaked material could include details that are private, stigmatizing, or legally sensitive. Such exposure can lead to identity misuse, social or professional embarrassment, or targeted fraud. For the organization itself, a ransomware incident—whether fully confirmed or still at the claim stage—can disrupt operations, require costly recovery and notification efforts, and damage trust with clients and referral partners. Because the number of people affected is unknown and the precise data set is undisclosed, the scale of these effects cannot yet be measured from public sources.

Were you affected?

If you have been a client or staff member of Queens Center For Change, treat the sinobi listing as a reason for caution rather than confirmed proof of compromise. Monitor financial and credit accounts for unusual activity, be alert to unexpected communications that reference counseling or personal details, and consider placing fraud alerts with major credit bureaus if you believe your information may be at risk. Preserve any notices you receive from the organization. You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets. Public detail on this incident remains limited; further clarity will depend on any official statements from the organization or independent verification beyond the group’s claim.

AICompiled with AI assistance from public sources and published under our editorial standards.