Elmcrest Children’s Center experienced a major data breach. The center discovered suspicious activity within its internal network and an investigation determined that a cybercriminal accessed and copied files between March 10, 2025 and July 24, 2025.
A ransomware group known as INTERLOCK claimed responsibility for the attack, stating on a dark web posting dated Aug. 4, 2025, that they had stolen 448 GB of data, comprising 627,741 files in 87,773 folders. The large volume of files taken, along with the personal and health information compromised, puts children and their families at risk for identity theft and fraud.
According to the Notice of Data Security Event Elmcrest published on its website on Oct. 2, 2025, the cyberattack investigation is still ongoing. It has been discovered that that breach compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information may include names, contact information, dates of birth, Social Security numbers, health insurance information and medical records. The total number of affected individuals has not been announced.
Elmcrest Children’s Center responded the breach by engaging third-party cybersecurity experts and notifying federal law enforcement. The center will continue its investigation and work to identity all impacted individuals. Required state and federal disclosures will be issued, and affected children, patients and their families will be notified by mail.
If you believe your personal information may have been compromised in this breach:
More information about Elmcrest Children’s Center can be found on the Elmcrest website.