Church of the Nazarene, Global Ministry Center data breach

What we know

The Church of the Nazarene, Global Ministry Center serves as the international administrative and operational headquarters for a major Protestant denomination with a worldwide footprint. Operating at this global scale requires the organization to collect, process, and store vast quantities of sensitive information. Beyond managing internal personnel, clergy, and missionary staff records, the Global Ministry Center handles extensive administrative databases, donor financial profiles, payroll systems, and confidential correspondence. Because organizations of this size frequently coordinate international missions, educational institutions, and benevolent ministries, they amass deeply personal details concerning employees, donors, volunteers, and beneficiaries alike. In 2025, the Church of the Nazarene, Global Ministry Center reported a significant security incident to the Massachusetts Attorney General, alerting regulators and affected individuals to an unauthorized compromise of its network infrastructure. While exact technical methodologies remain under active investigation, incidents affecting large religious and non-profit headquarters typically involve unauthorized intrusions into centralized databases, vulnerabilities within third-party vendor platforms, or credential compromises that allow malicious actors to quietly infiltrate internal file repositories. In many cases, these cyberattacks go undetected for weeks or months, granting attackers unfettered access to sensitive administrative and personal data systems. Data breach notification letters associated with this incident indicate that exposed records likely encompass a broad array of sensitive personal identifying information. Depending on an individual's relationship to the organization, compromised data fields routinely include full names, dates of birth, Social Security numbers, home addresses, banking or direct deposit details, and confidential employment or tax records. The exposure of this information creates severe, long-term risks for victims. Social Security numbers and banking details are primary targets for identity thieves, enabling unauthorized credit applications, fraudulent tax return filings, and financial account takeovers that can take years to untangle and resolve. Under state and federal data protection frameworks, including the Massachusetts Data Privacy Act and general consumer protection statutes, organizations that collect and maintain private personal data have an affirmative legal duty to implement robust cybersecurity measures. These obligations require entities like the Church of the Nazarene, Global Ministry Center to utilize advanced encryption, maintain active network monitoring, conduct regular vulnerability assessments, and secure third-party integrations. The occurrence of a widespread data breach strongly suggests a failure in these critical administrative and technical safeguards, raising serious questions about whether adequate steps were taken to prevent unauthorized access. Receiving an official data breach notification letter from the Church of the Nazarene, Global Ministry Center is a formal acknowledgment that your private information was compromised due to inadequate data security. Legally, the receipt of this notice establishes the concrete injury and legal standing required to participate in a class action lawsuit aimed at holding the organization accountable. Affected individuals do not need to wait until they suffer actual financial loss or identity theft to take action. Our firm evaluates and litigates these data breach cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and there are no legal fees unless we successfully recover compensation on your behalf.

See every breach reported in Massachusetts or read what to do after a ransomware attack.