The Qilin ransomware group has claimed an attack on the Thorndale Foundation, a disability support organisation based in Werrington, NSW, that serves the lower Blue Mountains, Nepean and Hawkesbury regions.

The foundation told Cyber Daily on 21 September 2026: "We are aware of the allegations referred to in your correspondence."

It said the matter has been reported to the Australian Cyber Security Centre (ACSC) and relevant authorities and remains under investigation, and that it could not comment further while that process is ongoing.

The foundation has not confirmed a breach or said whether any personal information was involved. According to Cyber Daily, Qilin posted its claim in a 15 September leak post.

UPDATE 22 Oct 2026: re-sourced to the foundation's own statement; this card previously rested on a leak-site listing alone (source: Cyber Daily, 21 Sep 2026).

Correction (23 Oct 2026): removed Qilin's own descriptions of the documents it says it took, which the foundation has not confirmed. (source: https://www.cyberdaily.au/security/14207-exclusive-aussie-not-for-profit-thorndale-foundation-investigating-qilin-breach-claims)