www.eastersealsnei.org Listed by devman Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
www.eastersealsnei.org was listed by the devman ransomware group on December 01, 2025, with internal files reported as exfiltrated and an undisclosed number of individuals potentially affected. Anyone who has shared personal information with the organization should review their accounts for unusual activity and follow any guidance issued by Easterseals Northeast Iowa.
Inside the incident
The listing was reported on December 01, 2025. It describes the removal of internal files from the organisation’s systems. No further details on the date of the intrusion, the method of access, or the precise contents of the files have been released. The group’s post sets the ransom at 550,000 and states that 280 gigabytes of material were taken.
Who is devman?
Devman is a ransomware operator that maintains a public listing of claimed victims. Groups of this type commonly encrypt systems, copy files beforehand, and then post details on a site to pressure payment. Their listings function as an unverified claim until corroborated by the affected organisation or by law-enforcement findings.
About www.eastersealsnei.org
www.eastersealsnei.org operates as a regional nonprofit providing services to people with disabilities and their families. Organisations in this sector routinely collect personal information, health-related records, and donor details to deliver support programs and manage funding. A compromise at such an entity can affect individuals who rely on its services and who have shared sensitive information in the course of receiving care or assistance.
What was likely exposed
The listing refers only to “internal files” without specifying categories or confirming whether any material has been published. The exact contents therefore remain unconfirmed.
- Internal files exfiltrated
- Claimed volume: 280 gigabytes
- Claimed ransom demand: 550,000
What's at stake
Individuals whose records appear in the exfiltrated material could face risks of identity misuse or unwanted disclosure of personal circumstances. The organisation may incur costs related to investigation, system restoration, and regulatory compliance. Because the data types have not been itemised, the practical impact on any specific person cannot yet be determined.
Were you affected?
Begin by contacting www.eastersealsnei.org directly for any official notification. Monitor financial and health accounts for unusual activity. Readers can run a free exposure scan of their email to check whether their information has surfaced in known breach data.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
sharinc.org Listed by devman Ransomware GroupJennings SD Listed by devman Ransomware Groupoppor**nity*****.org Listed by devman Ransomware Groupi**o**.us Listed by devman Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the www.eastersealsnei.org Listed by devman Ransomware Group →
Publicly posted by devman — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.