Hudson River Housing Suffers Ransomware Attack, Exposing Sensitive Data
Hudson River Housing, Inc., a Poughkeepsie, New York-based nonprofit, disclosed a data breach stemming from a ransomware attack by the threat actor RHYSIDA. The incident began with unauthorized network access, later confirmed to involve the exfiltration of sensitive files on or around April 28, 2025.
The full extent of the breach was discovered on March 5, 2026, revealing that exposed data included full names, Social Security numbers, driver’s license numbers, dates of birth, and financial account details. On June 7, 2025, RHYSIDA claimed responsibility on the dark web, threatening to publish the stolen data within a week.
The breach impacted at least one resident each in Massachusetts and New Hampshire, as noted in disclosures filed with state regulators. In response, Hudson River Housing offered affected individuals a complimentary 12- or 24-month membership to Epiq Privacy Solutions, providing credit monitoring, identity theft detection, and recovery support.
The organization’s official notice outlines enrollment instructions for the service, along with guidance on monitoring financial accounts and credit reports for fraudulent activity.
Source: https://www.claimdepot.com/data-breach/hudson-river-housing-2026
Hudson River Housing cybersecurity rating report: https://www.rankiteo.com/company/hudson-river-housing
"id": "HUD1773671683",
"linkid": "hudson-river-housing",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'At least one resident each in '
'Massachusetts and New Hampshire',
'industry': 'Housing/Nonprofit',
'location': 'Poughkeepsie, New York, USA',
'name': 'Hudson River Housing, Inc.',
'type': 'Nonprofit'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': 'Guidance on monitoring financial accounts and credit '
'reports for fraudulent activity; enrollment '
'instructions for Epiq Privacy Solutions',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': ['Full names',
'Social Security '
'numbers',
'Driver’s license '
'numbers',
'Dates of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial Account Details']},
'date_detected': '2025-04-28',
'date_publicly_disclosed': '2026-03-05',
'description': 'Hudson River Housing, Inc., a Poughkeepsie, New York-based '
'nonprofit, disclosed a data breach stemming from a ransomware '
'attack by the threat actor RHYSIDA. The incident began with '
'unauthorized network access, later confirmed to involve the '
'exfiltration of sensitive files. The breach exposed full '
'names, Social Security numbers, driver’s license numbers, '
'dates of birth, and financial account details. RHYSIDA '
'claimed responsibility on the dark web, threatening to '
'publish the stolen data within a week.',
'impact': {'data_compromised': 'Sensitive personal and financial information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'RHYSIDA'},
'recommendations': 'Monitor financial accounts and credit reports for '
'fraudulent activity',
'references': [{'source': 'Hudson River Housing Official Notice'}],
'regulatory_compliance': {'regulatory_notifications': ['Disclosures filed '
'with state regulators '
'in Massachusetts and '
'New Hampshire']},
'response': {'communication_strategy': 'Official notice with enrollment '
'instructions for affected individuals',
'third_party_assistance': 'Epiq Privacy Solutions (credit '
'monitoring and identity theft '
'detection)'},
'threat_actor': 'RHYSIDA',
'title': 'Hudson River Housing Ransomware Attack and Data Breach',
'type': 'Ransomware'}