Temple Shalom Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Temple Shalom, a Reform Jewish congregation in the Washington, D.C. area, was listed on December 13, 2025, by the ransomware group dragonforce. The listing states that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and no further details on the scope or confirmation of the data release have been made public. This incident occurs amid ongoing ransomware activity targeting organizations that hold personal and operational records. Listings on leak sites serve as a pressure tactic, regardless of whether data is later published or sold.

What happened

The incident was reported on December 13, 2025, when dragonforce added Temple Shalom to its leak site. The group claims internal files were taken in a ransomware operation. No information has been released on the date of the intrusion, the volume of data involved, or whether encryption occurred alongside the exfiltration. The number of affected individuals is not disclosed.

Who is dragonforce?

Dragonforce is a ransomware group that publicly lists victim organizations on a dedicated site after claiming to have stolen data. The group follows a double-extortion pattern common among current ransomware operators: data is removed and used to pressure the target, often accompanied by encryption of systems. Such actors have appeared in multiple incidents involving both private and nonprofit entities, though specific claims about any single victim require independent verification.

About Temple Shalom

Temple Shalom is a Reform Jewish congregation serving approximately 400 families in the Washington, D.C. area. It maintains member records to support religious services, educational programs, community events, and administrative functions. Organizations of this type routinely collect names, addresses, contact details, family information, and financial records related to dues or donations.

What was likely exposed

The only detail provided is that internal files were allegedly exfiltrated. The precise contents of those files have not been disclosed. Congregations routinely store personal identifiers, membership histories, and limited financial data; however, whether any of these categories were among the files taken remains unconfirmed.

Why it matters

Exposure of internal files from a membership organization can affect individuals whose contact and family information is held for congregational purposes. Such data may be used for targeted contact or further social-engineering attempts. For the organization, the event raises questions about data handling practices and the protection of records that members provide in a community setting.

If your data was in this claimed breach

Monitor bank and credit accounts for unusual activity and consider placing a credit freeze if personal identifiers appear at risk. Change passwords for any accounts linked to the organization and enable multi-factor authentication where available. Individuals can run a free exposure scan of their email address against known breach data to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.