Gladney Centre for Adoption

Gladney Centre for Adoption, a non-profit adoption agency, experienced a significant data breach due to an unencrypted, non-password-protected database. The breach exposed sensitive information about children, parents, employees, and other individuals, including names, phone numbers, postal addresses, and data on adoption statuses. The database contained over 1.1 million records and was discovered by a security researcher. Although there is no evidence that the data was accessed by malicious actors before being secured, the potential for phishing attacks, identity theft, wire fraud, and ransomware is high.

Source: https://www.techradar.com/pro/security/over-1-million-records-from-us-adoption-organization-left-exposed-online

TPRM report: https://scoringcyber.rankiteo.com/company/gladneycenter

"id": "gla606071825",
"linkid": "gladneycenter",
"type": "Breach",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Adoption Services',
                        'name': 'Gladney Centre for Adoption',
                        'type': 'Non-Profit Adoption Agency'}],
 'attack_vector': 'Unprotected Database',
 'data_breach': {'data_encryption': 'None',
                 'number_of_records_exposed': '1.1 million',
                 'personally_identifiable_information': ['Names',
                                                         'Phone numbers',
                                                         'Postal addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'description': "Gladney Centre for Adoption's CRM was generating plenty of "
                'sensitive data that was being stored in an unencrypted, '
                'non-password-protected database. The database contained '
                'names, addresses, and more. The information is highly '
                'sensitive and valuable to cybercriminals, who could use it '
                'for phishing, malware deployment, identity theft, wire fraud, '
                'and possibly ransomware.',
 'impact': {'data_compromised': ['Names',
                                 'Phone numbers',
                                 'Postal addresses',
                                 'Information about birth fathers',
                                 'Approval status for adoptive parents'],
            'identity_theft_risk': 'High',
            'systems_affected': ['CRM system']},
 'post_incident_analysis': {'root_causes': 'Unencrypted, '
                                           'non-password-protected database'},
 'references': [{'source': 'Website Planet'}],
 'response': {'containment_measures': 'Database locked down immediately'},
 'title': 'Data Leak at Gladney Centre for Adoption',
 'type': 'Data Leak',
 'vulnerability_exploited': 'Unencrypted, non-password-protected database'}