Karen#1
Well-known member
The Documented Facts
In early December 2025, the Russian-linked ransomware group Qilin claimed responsibility for a data breach at the Church of Scientology’s Advanced Organisation Saint Hill UK (AOSH UK), one of the organization’s major international hubs. The attack was first reported on December 4, 2025.
Qilin published 22 screenshots as proof of access. Tony Ortega posted some of the screenshots on his Underground Bunker Substack. The leaked materials, as documented by cybersecurity outlets including Cybernews, HackRead, and SC Media, show:
The breach appears to represent access at the file server or document management level rather than a single endpoint compromise.
INCOMM: Scientology’s Global Data Network
Scientology operates a centralized computer system called INCOMM (International Network of Computer Organized Management). According to court documents, ex-member testimony, and Scientology’s own publications, INCOMM links Scientology organizations worldwide—connecting Saint Hill UK to Clearwater, Florida; the International Base in California; and other major facilities.
This raises a technical question: If Qilin breached a UK node with access to INCOMM, what visibility might that provide into the broader network? Ransomware groups routinely move laterally through connected systems. Whether this occurred is unknown, but the architecture suggests a UK breach could theoretically be more than a UK breach.
The City of London Presence
Saint Hill is not Scientology’s only UK footprint. The organization maintains a significant presence in central London, including a large headquarters on Queen Victoria Street—strategically located in Central London. This facility opened in 2006.
Scientology’s location in London allows it to recruit among financial professionals. If member records from Scientology’s operations were accessible through the compromised systems, the data could include individuals employed in banking, asset management, and related sectors—along with whatever they disclosed in auditing sessions.
Qilin is a ransomware-as-a-service operation believed to be Russian-speaking based on recruitment activity on Russian-language hacker forums. The group avoids targeting Commonwealth of Independent States (CIS) countries. According to Cybernews, Qilin has claimed more than 600 attacks in the past six months alone, with notable ransom demands including $10 million from Malaysia Airports and $2.12 million from a Spanish city.
The John Coale Timeline
John P. Coale is a veteran Washington attorney and longtime member of the Church of Scientology. His wife, journalist Greta Van Susteren (currently at Newsmax), is also a Scientologist. Coale joined Scientology in the early 1980s, according to a 1998 St. Petersburg Times profile.
January 2025: Coale served as Trump’s attorney in the lawsuit against Meta over the post-January 6 account suspension. Meta settled for $25 million, with $22 million going to Trump’s presidential library fund. Coale confirmed the settlement was reached through direct negotiations between Zuckerberg and Trump at Mar-a-Lago.
March 2025: Coale was appointed deputy special envoy to Ukraine under Keith Kellogg.
June 2025: Coale visited Minsk and helped secure the release of 14 political prisoners, including opposition figure Sergei Tikhanovsky.
September 2025: Coale returned to Minsk; Belarus released 52 additional political prisoners. The U.S. subsequently lifted sanctions on Belarusian state airline Belavia.
November 9, 2025: Trump announced Coale’s nomination as U.S. Special Envoy to Belarus, praising him for negotiating the release of “100 Hostages.”
December 4, 2025: Qilin claims the Scientology data breach.
December 2025: Coale told state media that he discusses the Russia-Ukraine war with Lukashenko and that Lukashenko’s “advice could be useful” given his relationship with Putin.
Scientologist John Coale and his wife Greta Van Susteren have long befriended Franklin Graham. This has allowed them to “safepoint” Scientology in Christian Evangelicalism — and this despite L. Ron Hubbard’s blaspheming Jesus Christ as a “lover of young men and boys.” Hubbard declared that he was the Antichrist and that Christianity is an alien R6 implant designed to enslave people. Is Franklin Graham willingly blind or a dupe? When pressed, Graham has only admitted to “religious differences” with his friends John and Greta. This violates the scriptural mandate that light can have no fellowship with darkness (II Cor. 6:14).
What Scientology Holds on Its Members
The Church of Scientology maintains extensive records on members, a practice documented in court cases, media investigations, and accounts from former members over decades. These include:
PC Folders (Preclear Files): Records from auditing sessions, Scientology’s form of counseling/confession. These sessions are conducted while the member holds electrodes connected to an “E-meter” and discusses intimate personal matters. Former members have testified that these files contain confessions of crimes, sexual histories, and deeply personal information.
Knowledge Reports (KRs): Internal reports that members file on one another documenting perceived ethical violations, critical statements, or suspect behavior.
Ethics Files: Records of disciplinary actions, “conditions assignments,” and internal investigations.
Financial Records: Detailed records of donations, course purchases, and “IAS” (International Association of Scientologists) contribution histories—often totaling hundreds of thousands of dollars for long-term members.
Secret Reports from Its Members: What reports would John Coale send to RTC and David Miscavige on President Trump; the White House; the State Department; Franklin Graham and Graham’s evangelical network; and other matters of interest to Scientology?
READ MORE:
scientologymoneyproject.com
In early December 2025, the Russian-linked ransomware group Qilin claimed responsibility for a data breach at the Church of Scientology’s Advanced Organisation Saint Hill UK (AOSH UK), one of the organization’s major international hubs. The attack was first reported on December 4, 2025.
Qilin published 22 screenshots as proof of access. Tony Ortega posted some of the screenshots on his Underground Bunker Substack. The leaked materials, as documented by cybersecurity outlets including Cybernews, HackRead, and SC Media, show:
- Visa processing records for religious staff, including named individuals applying for UK Religious Worker visas
- Internal HR and finance documents with departmental sign-offs
- Security budgets totaling nearly £100,000 for 2024-2025, including line items for bomb dogs, patrol dogs, and guard deployment locations
- Financial invoices with banking details including IBAN and SWIFT information
- A “Knowledge Report” containing personal member information
- Member spreadsheets listing individuals from South America with contact details and travel history
The breach appears to represent access at the file server or document management level rather than a single endpoint compromise.
INCOMM: Scientology’s Global Data Network
Scientology operates a centralized computer system called INCOMM (International Network of Computer Organized Management). According to court documents, ex-member testimony, and Scientology’s own publications, INCOMM links Scientology organizations worldwide—connecting Saint Hill UK to Clearwater, Florida; the International Base in California; and other major facilities.
This raises a technical question: If Qilin breached a UK node with access to INCOMM, what visibility might that provide into the broader network? Ransomware groups routinely move laterally through connected systems. Whether this occurred is unknown, but the architecture suggests a UK breach could theoretically be more than a UK breach.
The City of London Presence
Saint Hill is not Scientology’s only UK footprint. The organization maintains a significant presence in central London, including a large headquarters on Queen Victoria Street—strategically located in Central London. This facility opened in 2006.
Scientology’s location in London allows it to recruit among financial professionals. If member records from Scientology’s operations were accessible through the compromised systems, the data could include individuals employed in banking, asset management, and related sectors—along with whatever they disclosed in auditing sessions.
Qilin is a ransomware-as-a-service operation believed to be Russian-speaking based on recruitment activity on Russian-language hacker forums. The group avoids targeting Commonwealth of Independent States (CIS) countries. According to Cybernews, Qilin has claimed more than 600 attacks in the past six months alone, with notable ransom demands including $10 million from Malaysia Airports and $2.12 million from a Spanish city.
The John Coale Timeline
John P. Coale is a veteran Washington attorney and longtime member of the Church of Scientology. His wife, journalist Greta Van Susteren (currently at Newsmax), is also a Scientologist. Coale joined Scientology in the early 1980s, according to a 1998 St. Petersburg Times profile.
January 2025: Coale served as Trump’s attorney in the lawsuit against Meta over the post-January 6 account suspension. Meta settled for $25 million, with $22 million going to Trump’s presidential library fund. Coale confirmed the settlement was reached through direct negotiations between Zuckerberg and Trump at Mar-a-Lago.
March 2025: Coale was appointed deputy special envoy to Ukraine under Keith Kellogg.
June 2025: Coale visited Minsk and helped secure the release of 14 political prisoners, including opposition figure Sergei Tikhanovsky.
September 2025: Coale returned to Minsk; Belarus released 52 additional political prisoners. The U.S. subsequently lifted sanctions on Belarusian state airline Belavia.
November 9, 2025: Trump announced Coale’s nomination as U.S. Special Envoy to Belarus, praising him for negotiating the release of “100 Hostages.”
December 4, 2025: Qilin claims the Scientology data breach.
December 2025: Coale told state media that he discusses the Russia-Ukraine war with Lukashenko and that Lukashenko’s “advice could be useful” given his relationship with Putin.
Scientologist John Coale and his wife Greta Van Susteren have long befriended Franklin Graham. This has allowed them to “safepoint” Scientology in Christian Evangelicalism — and this despite L. Ron Hubbard’s blaspheming Jesus Christ as a “lover of young men and boys.” Hubbard declared that he was the Antichrist and that Christianity is an alien R6 implant designed to enslave people. Is Franklin Graham willingly blind or a dupe? When pressed, Graham has only admitted to “religious differences” with his friends John and Greta. This violates the scriptural mandate that light can have no fellowship with darkness (II Cor. 6:14).
What Scientology Holds on Its Members
The Church of Scientology maintains extensive records on members, a practice documented in court cases, media investigations, and accounts from former members over decades. These include:
PC Folders (Preclear Files): Records from auditing sessions, Scientology’s form of counseling/confession. These sessions are conducted while the member holds electrodes connected to an “E-meter” and discusses intimate personal matters. Former members have testified that these files contain confessions of crimes, sexual histories, and deeply personal information.
Knowledge Reports (KRs): Internal reports that members file on one another documenting perceived ethical violations, critical statements, or suspect behavior.
Ethics Files: Records of disciplinary actions, “conditions assignments,” and internal investigations.
Financial Records: Detailed records of donations, course purchases, and “IAS” (International Association of Scientologists) contribution histories—often totaling hundreds of thousands of dollars for long-term members.
Secret Reports from Its Members: What reports would John Coale send to RTC and David Miscavige on President Trump; the White House; the State Department; Franklin Graham and Graham’s evangelical network; and other matters of interest to Scientology?
READ MORE:
Scientologist John Coale and Qilin's Ransomware Attack on Scientology St. Hill
Scientologist John Coale and Qilin's Ransomware Attack on Scientology St. Hill: What are the possible risks?
scientologymoneyproject.com
