Ransomware group claims attack on Els for Autism Foundation
A criminal group called cmdorganization has listed the Florida-based autism charity on a dark-web extortion site. The foundation has not confirmed any incident, and the claim could not be independently verified.
Key points
- Criminal group cmdorganization listed Els for Autism Foundation on its dark-web leak site on 12 July 2026.
- The listing was first observed by Ransomware.live, a service that monitors extortion sites run by criminal groups.
- Els for Autism Foundation, based in Jupiter, Florida, supports adults and children with autism spectrum disorder.
- The foundation has not publicly confirmed any breach, and the claim couldn't be independently verified at publication time.
- Ransomware groups run these listings to pressure victims into paying, and claims are sometimes exaggerated or false.
A ransomware group calling itself cmdorganization has named Els for Autism Foundation on its dark-web extortion site, claiming to have attacked the Jupiter, Florida charity that provides programs for people with autism spectrum disorder. Ransomware is malicious software that breaks into an organisation's systems, steals data, then demands payment. Groups typically post victims on so-called leak sites, hidden websites on the dark web, to pressure them into paying before any stolen files are published. Ransomware.live, a monitoring service that tracks these sites, first observed the listing on 12 July 2026.
This is one of 16 ransomware claims we've reported in the past 30 days, a run that included the WorldLeaks attack on Centers Laboratory, which exposed records covering 542,377 people.
Should people connected to Els for Autism be worried?
Not necessarily, but close attention is warranted. The foundation hasn't confirmed the claim, and ransomware groups sometimes exaggerate or fabricate listings to manufacture pressure. Nothing here establishes that a breach occurred.
What the group's post does include is a general description of the organisation and its work. Criminals who research a target collect exactly the kind of detail that makes a convincing scam message. That's the practical risk right now.
Watch for phishing emails: fake messages designed to look like they come from a trusted source. Criminals sometimes send these right after a listing goes public, using the news as a hook. Any email claiming to offer "breach compensation" or asking you to "verify your account" is almost certainly a scam.
Don't reuse passwords. If you have an account with Els for Autism and the same password appears elsewhere, change it on those other sites now.
Be cautious about unexpected phone calls. Scammers occasionally pose as breach-response services and ask for personal details or payment. No legitimate organisation will cold-call you for payment following a data incident.
The foundation has released no public statement, and no regulatory filing or official confirmation existed at publication. If that changes, we'll update this article.
