Summary
Written by ThreatClusterfrom victim profile, leak post, screenshotInterlock claims to have stolen 330 GB from YMCA of Western North Carolina (ymcawnc.org). The leak states access to confidential client information (including fingerprints), contracts and incidents, employee personal data, and financial documents. The leak post is currently listed on the group’s site.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
The YMCA of Western North Carolina operates seven fitness centers, a summer camp, dozens of food trucks, youth sports programs, and many other initiatives. They are also the state's largest provider of licensed school-age childcare. However, they don't ensure security and aren't responsible for it, and you can gain access to confidential client information (complete sets of documents, even fingerprints), contracts, and incidents (of which they have many!), as well as to employee personal data and financial documents.
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.