The Church of the Nazarene, Global Ministry Center

The Church of the Nazarene, Global Ministry Center experienced a data breach due to unauthorized access to an employee email account between April 19, 2024, and June 20, 2024. The incident was disclosed on April 4, 2025, though the exact number of affected individuals and the specific types of compromised personal information remain undisclosed. The breach suggests potential exposure of sensitive employee or associated personal data, likely including names, contact details, or other personally identifiable information (PII) stored in the compromised email account. While the full scope of the breach is unclear, the unauthorized access to an internal email system raises concerns about internal data security protocols, potential phishing vulnerabilities, and the risk of further exploitation of exposed information. The delayed disclosure (nearly a year after the initial compromise period) may also impact trust and regulatory compliance. No evidence suggests ransomware, financial fraud, or large-scale customer data exposure, but the incident highlights vulnerabilities in protecting employee-related data from cyber intrusions.

Source: https://ago.vermont.gov/document/2025-04-04-church-nazarene-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/rescue-hill

"id": "res042090625",
"linkid": "rescue-hill",
"type": "Breach",
"date": "4/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Religious',
                        'name': 'Church of the Nazarene, Global Ministry '
                                'Center',
                        'type': 'Non-Profit Organization'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Personal Information']},
 'date_publicly_disclosed': '2025-04-04',
 'description': 'The Church of the Nazarene, Global Ministry Center reported a '
                'data breach involving unauthorized access to an employee '
                'email account, which may have affected personal information '
                'from April 19, 2024, to June 20, 2024. The specific number of '
                'individuals affected and the detailed data elements involved '
                'are unknown.',
 'impact': {'data_compromised': True,
            'identity_theft_risk': True,
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'title': 'Data Breach at Church of the Nazarene, Global Ministry Center',
 'type': 'Data Breach'}