Ransomware victim disclosure
← All victimsNow-Forward
Claimed by CMD ORGANIZATION · listed 5 days ago
Status timeline
- Listed
May 27, 2026
- Data leaked
At a glance
- Group
- CMD ORGANIZATION
- Status
- Data leaked
- Country
- US
- Listed on leak site
- May 27, 2026
- Data size
- 59 GB
About the victim
AI dossier — public-source company profileNow-Forward is a non-profit organization based in Dallas providing essential services including financial aid, medical and dental care, food, clothing, ESL classes, tax preparation, and school supply assistance to low-income families. Established over 40 years ago, the organization directs 96% of funds toward direct client services and operates through donations, volunteers, and community partnerships.
- Industry
- Non-profit / Social Services
Attack summary
Severity: high — Exfiltration of 59 GB from a non-profit serving vulnerable low-income populations likely includes PII, medical, and financial data at scale. The organization's role managing sensitive client information and financial aid records elevates risk despite no proof files displayed.CMD ORGANIZATION claims to have exfiltrated 59 GB of data from Now-Forward. The post provides no details on encryption, operational disruption, or specific data categories targeted.
Data the group says was taken
AI dossier — extracted from the leak post- Client financial records
- Medical records
- Dental records
- Personal identification documents
- Service recipient information
What the group claims
A non-profit organization based in Dallas that provides essential services such as financial aid, medical and dental care, food, clothing, and ESL classes to low-income families. Established over 40 years ago, they direct 96% of funds toward client services and also offer tax preparation and school supply assistance.
The leak post
captured from the group's siteIT Security organization est. 2026. Now-Forward is a non-profit organization based in Dallas that provides a range of essential services such as financial aid, medical and dental care, food, clothing, and ESL classes to low-income families. Established to effectively serve the urgent needs of the community, they have been a trusted resource for over 40 years, assisting residents facing unexpected life challenges. The organization supports their mission through donations, volunteer work, and partnerships with local entities, ensuring that 96% of their funds are directed toward client services. Their extensive offerings also include tax preparation and school supply assistance, enabling families to achieve greater stability and self-sufficiency. Stonehenge Therapeutic Community is dedicated to providing expert services to individuals, families, and communities affected by substance use. Their offerings include addiction medicine and withdrawal support, supportive housing, integrated support and justice, and residential services. The organization emphasizes partnership, support, and advocacy, aiming to help clients learn to live effectively and contribute to society. With a history d…
Screenshot of the leak post
Sources
Source
Indexed 5 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.