.png)
Elmcrest Children's Center Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Elmcrest Children's Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Elmcrest Children's Center
Elmcrest Children's Center is a non-profit organization based in Syracuse, New York, that focuses on supporting children with emotional, behavioral and developmental challenges. Established in 1845 as the Syracuse Orphans’ Asylum, Elmcrest provides services, including residential treatment, early education, respite care and family support programs.
Each year, Elmcrest serves thousands of children and their family members through over 20 different programs. These include agency-operated boarding homes, a Universal Pre-K program, a literacy center and crisis support for families.
What happened?
Elmcrest Children's Center detected suspicious activity within its computer network. An investigation determined that between March 10, 2025, and July 24, 2025, an unauthorized actor accessed and copied files from Elmcrest’s systems.
The ransomware group INTERLOCK claimed responsibility for the attack and posted about it on a dark web site on Aug. 4, 2025, stating they had obtained 448 GB of data, including more than 627,000 files. The data breach compromised both personal and protected health information belonging to children and their families.
Possible Exposed Information
- Name
- Address
- Dates of birth
- Social Security number
- Health insurance information
- Medical information
Elmcrest published a public notice with details about the cyberattack and the ongoing investigation on its website.
Your Rights and Next Steps
If you believe your information may have been involved in this breach, there are important steps you can take to help protect yourself. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Communication and credit monitoring services: Review and save any notification letters you receive. Enroll in free credit monitoring and identity protection services, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If you or your child's information was compromised in the Elmcrest Children's Center data breach, you may be eligible for financial compensation. Lawyers are ready to help people affected by this incident pursue claims for damages related to the exposure of sensitive information.
To find out if you qualify, complete the form below to join a lawsuit.
.svg)