First Baptist Church of Hammond in Indiana experienced a cyberattack earlier this month where personal data of church staff, missionaries, and volunteers was breached. The compromised data includes names, Social Security numbers, state-issued ID numbers, addresses, contact info, unique healthcare identifiers, dates of birth, and health information. The ransomware gang Rhysida took credit for the attack and demanded a ransom of 5 bitcoins, worth about $594,000. If the ransom is not paid, Rhysida threatens to sell the stolen data to the highest bidder.
TPRM report: https://scoringcyber.rankiteo.com/company/first-baptist-church-of-hammond
"id": "fir234072925",
"linkid": "first-baptist-church-of-hammond",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Religious Services',
'location': 'Hammond, Indiana',
'name': 'First Baptist Church of Hammond',
'type': 'Religious Organization'}],
'data_breach': {'data_encryption': True,
'data_exfiltration': True,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'State-issued ID numbers',
'Addresses',
'Contact info',
'Unique healthcare identifiers',
'Dates of birth',
'Health information for '
'self-funded health plan claims '
'processing']},
'date_detected': '2025-07-15',
'date_publicly_disclosed': '2025-07-15',
'description': 'Ransomware gang Rhysida took credit for a cyberattack on '
'First Baptist Church of Hammond in Indiana, demanding a '
'ransom of 5 bitcoins worth about $594,000. The attack '
'compromised personal data of church staff, missionaries, and '
'volunteers.',
'impact': {'data_compromised': ['Names',
'Social Security numbers',
'State-issued ID numbers',
'Addresses',
'Contact info',
'Unique healthcare identifiers',
'Dates of birth',
'Health information for self-funded health '
'plan claims processing']},
'investigation_status': 'Ongoing',
'motivation': 'Financial Gain',
'ransomware': {'data_encryption': True,
'data_exfiltration': True,
'ransom_demanded': '5 bitcoins (approx. $594,000)',
'ransomware_strain': 'Rhysida'},
'references': [{'source': 'Comparitech'}],
'response': {'communication_strategy': 'Issued a notice to victims'},
'threat_actor': 'Rhysida',
'title': 'Ransomware Attack on First Baptist Church of Hammond',
'type': 'Ransomware'}