Storm Claims Ransomware Attack on Pennsylvania Nonprofit Step By Step
Summary
Storm claims it targeted Step By Step, a Pennsylvania nonprofit providing disability and behavioral health services, and disrupted its programs. The post says the group’s claims are unconfirmed.
Key points
- The monitored claim identifies Step By Step, a US nonprofit human services organization, as the victim.
- The post attributes the claim to the Storm ransomware group and says it is based on the group’s public claims.
- The post reports disruption to residential, behavioral health, autism, and in-home support programs, but does not independently confirm this impact.
- The claim was published on October 2, 2026, and recorded as discovered on October 3, 2026.
- The post says it cannot confirm the claim and invites an official statement from the organization.
Article Details
- Victim
- Step By Step, Inc.
- Claim Date
- 2026-10-02
- Encryption Status
- Unknown; the source does not establish that systems were encrypted.
- Exfiltration Status
- Unknown; the source does not establish that data was exfiltrated.
- Leak Status
- Storm reportedly made a public claim listing the victim. The source says the claim is unconfirmed and does not establish that data was published.