Data breach at The Children's Foundation via IT provider Highland Shores Children's Aid Society — ransomware-style encryption of systems
Severity: medium · Patch status: no-fix-needed · Since 2026-11-10
The Children's Foundation has issued a privacy notice after a data breach at its IT service provider, Highland Shores Children's Aid Society. An unauthorized third party gained access to the provider's IT network on July 6, 2026 and encrypted systems before being detected on August 25, 2026 — a pattern consistent with ransomware. The breach may have exposed personal information belonging to individuals associated with the Foundation. No specific number of affected individuals or exact data types are stated in the report. There is no software patch involved; this is a third-party compromise of a child-welfare service provider, and remediation rests on incident response, notification, and identity-protection support rather than a code fix.
What to do
- Individuals associated with The Children's Foundation should monitor the privacy notice, watch for phishing and identity theft, and consider credit monitoring if offered
- Organizations using Highland Shores or similar child-welfare IT providers should review third-party access and data-sharing agreements
- Verify what personal data was exposed and ensure regulatory breach-notification obligations are met
- Harden remote access, backups, and detection to limit ransomware-style encryption impact
Sources
All live incidents on Threat Watch
