Screenshots from the ransomware attack on Scientology's UK headquarters

Karen#1

Well-known member
TONY ORTEGA
Excerpt:



Yesterday, Cybersecurity news websites reported the hacking of Scientology’s UK headquarters by a criminal ransomware gang known as Qilin.

According to Hackread, in a story that was mirrored by archive.org, Qilin’s method is to access a target’s servers, demand ransom, and if the target does not comply, then to post some of that data online in order to persuade the victim to pay up.

Hackread said that appears to be the case here, where Qilin has posted screenshots indicating that they penetrated deeply into Scientology’s UK servers, and accessed a lot of very sensitive internal information at Advanced Org Saint Hill UK, or AOSHUK, also known as Saint Hill Manor in East Grinstead, England.

We don’t know if Scientology will be persuaded to pay these criminals over these leaks, but we are interested in Scientology as a criminal organization itself, which extorts the young and the old financially, rips apart families, and forces young women to have abortions, among many other abuses.

So we are interested in what is in the screenshots that Qilin posted at its leak site.

“I haven’t had time to properly review all the documents yet, but from what I’ve seen so far this looks like it could be hugely damaging to Scientology. One document includes an admission there were several people working without visas at Saint Hill, and another details the security expenses for the IAS event,” says former London staffer Alex Barnes-Ross. “There’s also a list of people currently service at London Org, which may give us an indication of just how much Scientology are struggling. I’m looking forward to dissecting this information and seeing what else is released in due course.”

The first thing we were interested in was the 2024 budget for providing security at last year’s IAS gala, a three-day event. The Church of Scientology International (CSI), a US entity, was responsible for £131,497.20, and the local Advanced Org (AOSHUK) was responsible for £28,283.

We note that the largest line item, £74,326, goes to paying professional security for VIPs, including airport pick ups.

READ MORE

Screenshots from the ransomware attack on Scientology's UK headquarters
 
I'm trying hard not to snicker. Well, not that hard. OK, not trying at all, this is great, they've got the perfect target, LMAO! :-)
My son actually works in the state police cyber crimes unit, I'll have to share this story with him. If he has any interesting general information about how this works, I'll share.
 
Scientology always preaches “YOU PULLED IT IN” — their doctrine that any disaster in your life is your own fault.
Car crash? You pulled it in. Illness? You pulled it in. Getting robbed? You definitely pulled it in.

Well… yesterday, Scientology’s UK headquarters at Saint Hill was hacked by a ransomware gang, and huge amounts of internal data were leaked — budgets, visa violations, confidential staff lists, and documents showing just how badly their orgs are struggling.

So, by their own doctrine…
Did Saint Hill pull in a Russian ransomware gang?
Is this their “bad karma return cycle”?
Where’s the cult’s usual smug victim-blaming wisdom now?

This breach appears massive. Screenshots show deep access into AOSH UK servers, including highly sensitive internal operations, IAS event security budgets, and documents admitting that staff were working without visas. Even former London staffer Alex Barnes-Ross says this could be “hugely damaging,” and that more leaks may be coming.

For decades Scientology has extorted the vulnerable, destroyed families, exploited free labor, and bled its members dry.
Now the mask is slipping — not by critics, but by criminals who’ve exposed the cult’s own internal chaos.

And per Scientology’s own doctrine, there’s only one conclusion:
They pulled it in.
 
**“For 70 years Scientology has blamed every victim:
illness, accidents, abuse, crime — all dismissed as ‘you pulled it in.’

Fine.
Apply your own rule.


St. Hill pulled this in.


Karma is a far better auditor than the Church of Scientology ever was.”**
 
**“For 70 years Scientology has blamed every victim:
illness, accidents, abuse, crime — all dismissed as ‘you pulled it in.’

Fine.
Apply your own rule.


St. Hill pulled this in.


Karma is a far better auditor than the Church of Scientology ever was.”**
Actually, that’s exactly what they’re going to do. They’ll be a witch hunt so they can put a head on a pike.
The poor staff that will get blamed and punished.
Maybe that’ll be the tipping point and some of them will leave
Let’s hope
 
Actually, that’s exactly what they’re going to do. They’ll be a witch hunt so they can put a head on a pike.
The poor staff that will get blamed and punished.
Maybe that’ll be the tipping point and some of them will leave
Let’s hope
Scientology loves to scream “You pulled it in!” when anyone else is harmed…
but inside the Sea Org, when Scientology is harmed, they don’t follow their own rule.
They find someone to punish — brutally.



Remember this ?


The “Valentine’s Day Massacre” — 1995.
When an alleged security breach hit INCOMM, David Miscavige didn’t say the Sea Org had “pulled it in.”
He locked down 60 staff for four months of:

  • complete isolation
  • no contact with spouses or children
  • sleep deprivation
  • nonstop sec checks
  • forced confessions
  • humiliations with “withholds” read out publicly
  • guards marching them to showers and berthing
  • threats of lifelong disconnection
  • coerced signed secrecy contracts
  • and RTC physically patrolling with batons
  • all under the name of “ethics” and “religious discipline”

That’s Scientology’s real doctrine:
Not accountability.
Not responsibility.
Just punishment, terror, and scapegoating.
So when St. Hill gets hacked today?

Don’t expect them to say “We pulled it in.”
Expect them to do what they’ve always done:

Find someone below them to destroy.
Just like they did on Valentine’s Day 1995.
Same playbook.
Same cruelty.
Same cult.


 
Karen De La Carriere
“Scientology doctrine says there is always a WHO —
never an accident, never an act of nature, never random chance.
If a disaster happens, it’s because someone with ‘evil intentions’ caused it.
And if they can’t find the WHO?
Then it’s a HIDDEN WHO —
and the hunt begins. Sec Checks, surveys designed for others to rat out and snitch on others, rollback, False Purpose Rundown, lockdown in isolation etc.
That’s how insane it gets:
When massive mudslides hit Int Base in the 1990s
a literal act of nature —
Miscavige didn’t blame the weather.
He blamed the Sea Org INT Base members
He screamed, punished, and stripped basic rights from exhausted staff
because in his mind, mudslides was the crew’s out-ethics.
Mudslides = ‘you pulled it in.’
That’s the mental universe Scientology lives in.
So today’s St. Hill hack?
they won’t call it a cyber attack.
They won’t call it a breach.
They won’t call it failure of security.
They will call it a WHO.
A traitor.
A criminal.
Someone with ‘evil purposes against the only hope for mankind.’
Inside Scientology there are no thunderstorms,
no bad weather,
no accidents,
no hackers —
only scapegoats waiting to be destroyed.”
 



That is a video from Apostate Alex. Here is an AI-generated summary and the top twenty takeaways:


Summary
This video discusses a major cyberattack on the Church of Scientology's UK servers by a Russian ransomware group called Qilin. The speaker, Alex, emphasizes at the outset that he does not support hacking or criminal activity and had no involvement in the breach, though he anticipates Scientology will attempt to blame him and other protesters. The hackers have released approximately 22 documents so far and are demanding payment from Scientology to prevent further releases.

The leaked documents primarily consist of financial records, budget spreadsheets, and internal communications related to Scientology's annual IAS (International Association of Scientologists) event held at their UK headquarters, Saint Hill. The most significant revelations include detailed security budgets showing over £150,000 spent in 2024 (reduced to less in 2025), with substantial amounts allocated to perimeter security, dog patrols, and close protection for leader David Miscavige (£74,000 alone). The documents reveal connections between the US-based Church of Scientology International (CSI) and UK operations, despite their claimed legal separation, with US tax-exempt dollars funding UK activities.

Perhaps most damning are documents suggesting visa fraud, showing Scientology bringing foreign workers to the UK without proper documentation or using religious worker visas for people performing non-religious roles like security, sales, or administration. One document explicitly mentions staff working in the UK without valid visas and urgency to obtain proper documentation. The hack also exposed knowledge reports (internal ethics documents), personal data constituting a GDPR breach, and membership statistics showing only 12,000 active members in the UK despite Scientology's claims of 180,000+ UK parishioners years ago.
Top Twenty Takeaways
  1. Russian ransomware group Qilin hacked Scientology's UK servers and released 22 documents, demanding ransom payment to prevent further releases.
  2. Alex disclaims any involvement in the hack but believes the documents serve public interest, while anticipating Scientology will try to blame him and increase "fair game" harassment against him.
  3. Over £150,000 spent on security for the 2024 IAS event, with costs decreasing in 2025, potentially indicating declining attendance.
  4. £74,000 allocated for David Miscavige's close protection team for two weeks, including airport pickups—no other Scientology executive receives such protection.
  5. Church of Scientology International (CSI), a US tax-exempt organization, directly funded UK operations, despite claimed legal separation from UK entity COSREC.
  6. Nearly £30,000 paid to Deadline Security (security contractors Gaz and Dan) in 2024 just to manage protesters.
  7. Documents show visa fraud evidence, with staff working in UK without proper visas and others obtaining religious worker visas for non-religious roles like security, sales, and administration.
  8. Ambulance costs halved from 2024 to 2025 (£3,500 to £1,600), suggesting event attendance dropped by approximately half.
  9. Dog searches conducted at the Manor (L. Ron Hubbard's former residence), suggesting David Miscavige and possibly Tom Cruise stay there during events.
  10. Scientology maintains relationships with Rockwood Park, a Scientologist-owned property opposite Saint Hill, using it to house staff and potentially manufacture complaints about protesters.
  11. £4,700 spent on illegal obstructions (hoarding and planters) at entrance to disrupt protesters, which the local council ordered removed.
  12. Knowledge reports (internal ethics files) were accessed, suggesting hackers may have extensive personal and potentially incriminating information about abuse or criminal activity.
  13. Only 12,000 active members in UK mailing database, contradicting Scientology's historical claims of 180,000+ UK parishioners.
  14. £30,000 spent on promotional mailings in a single period, including Christmas cards to 12,000 people.
  15. This constitutes a major GDPR data breach, requiring Scientology to report to the Information Commissioner's Office and notify all affected individuals.
  16. Documents dated as recently as November 2025, indicating the hack occurred very recently and accessed current operational information.
  17. Evidence shows foreign staff flown from EU countries to work UK events, raising additional visa and employment law concerns.
  18. £4,000 spent on dog patrols in 2019 to prevent protesters from "breaking into the base," though Alex states protesters never attempted this.
  19. Internal documents reveal how strictly controlled staff finances are, requiring approval forms (CSWs) for virtually every expense.
  20. Alex shared documents with authorities before publishing and hopes hackers will release more files or provide them to law enforcement for investigation of potential criminal activities.
 
Here's a post at Tony Ortega's blog on how bad this is for the CoS.

 
I'm trying hard not to snicker. Well, not that hard. OK, not trying at all, this is great, they've got the perfect target, LMAO! :)
My son actually works in the state police cyber crimes unit, I'll have to share this story with him. If he has any interesting general information about how this works, I'll share.
OK, I've spoken with my son, he's worked with the secret service on such things. I don't know how much of this is already explained or understood, but the hacker breaches the files, makes copies and encrypts the files unbreakably (except for probably governments with ginormous supercomputer capabilities) and demand money in return for making the files available. Once paid, they may or may not actually release the files, and more likely than not will sell copies of the files on the dark web.
And the hacker may well have breached any amount of time before actively encrypting, and installed a back door for future re-entry.
 
The comments are of interest
 
Back
Top