TransCare+ is committed to transparency and accountability as we continue to navigate the complexities of modern cybersecurity threats. Today, we are releasing our comprehensive report detailing the sophisticated cyberattack that targeted our organization on July 24, 2024. This incident not only resulted in financial losses but also highlighted the vulnerabilities faced by organizations serving 2SLGBTQ+ communities. The report provides a detailed account of the events leading up to and following the breach, the actions taken to mitigate its impact, and the steps we have implemented to secure our systems moving forward.
This cyberattack infiltrated several of our key systems, including Google Workspace, Monday.com, Slack, and our banking services, resulting in unauthorized financial transactions (totaling $53,815.32), and operational disruptions. The attackers not only targeted our financial assets but also sought to disrupt our mission of serving the 2SLGBTQ+ community, underscoring the hate-driven nature of this attack.
While this breach caused significant challenges, we are proud to share that no client data was compromised. We have taken decisive action to enhance our cybersecurity infrastructure, transitioning to Microsoft Office 365, implementing hardware-based multi-factor authentication (MFA), securing new financial controls, and working with external experts to provide 24/7 monitoring of our systems.
Importantly, this report also includes recommendations for other nonprofit organizations to help them safeguard against similar incidents. Our goal is to share our experience and help strengthen the cybersecurity posture of nonprofits across the sector, especially those working with vulnerable communities.
We deeply value the trust placed in us by our community, partners, and funders. Restoring that trust is a top priority. We are fully committed to transparency and accountability as we continue to recover and strengthen our operations. Our report outlines these efforts and the ongoing actions we are taking to protect the organization from future threats.
This attack has also highlighted the growing risks faced by 2SLGBTQ+ organizations. As such, we will continue to advocate for stronger protections for our community and share the lessons learned from this experience with other nonprofits to help them safeguard against similar incidents.
We invite everyone to review the full Cybersecurity Incident Report. We remain dedicated to providing safe, reliable, and essential services to the 2SLGBTQ+ community and will emerge from this incident stronger, more secure, and more resilient.
Thank you for your continued support.
Sincerely,
TransCare+ Leadership Team & Board of Directors
www.transcareplus.org
