Skip to main content
A man sees his private data publicly available online, prompting him to consider filing an AI data security lawsuit

Family Service League Data Breach Investigation

The data breach lawyers at The Lyon Firm are investigating an alleged data security incident at the Family Service League (FSL), a longstanding pillar of support for Long Island, New York’s most vulnerable individuals. If you or a loved one has been impacted by the FSL data breach, contact an experienced attorney to discuss the next steps and to learn more about taking legal action. We represent plaintiffs in all fifty states following privacy violations and data breach events.

What Happened at Family Service League?

The INC Ransom group has claimed that it has hacked FSL, an organization that serves over 60,000 residents through vital programs addressing mental health, addiction, and homelessness.

On July 30, 2025, INC Ransom made a post on its dark web leak site, claiming it infiltrated the Family Service network and siphoned off 100GB of files. The files allegedly contain personal data and medical data

The group now threatens to release this data if a ransom is not paid, increasing the risk of identity theft, financial fraud, or medical identity theft for individuals with data compromised.

Ransomware groups like INC Ransom operate with a multi-pronged strategy, blending advanced intrusion tactics with ruthless extortion. They often gain initial access and exfiltrate data before encrypting systems to lock victims out. This “double extortion” tactic pressures organizations to pay a ransom quickly with threats to leak any stolen data.

These claims from INC are not verified, however, potentially affected individuals face heightened risks, and should monitor accounts and consider credit freezes. Contact an attorney to learn more about the ongoing investigation. We believe strongly that any entity that collects and stores sensitive data has a duty to protect it from cyberattacks and ransomware groups. Any organization deemed negligent in maintaining reasonably robust IT security may be held accountable in class action data breach lawsuits.