CentroNía Data Breach Exposes Sensitive Personal Information of D.C. Community Members A cybersecurity incident at CentroNía, a Washington, D.C.-based nonprofit, has exposed the sensitive personal data of individuals served by the organization. The breach occurred between June 10 and July 6, 2025, when an unauthorized actor accessed CentroNía’s network, viewing and exfiltrating files containing personally identifiable information (PII). CentroNía, founded in 1986, provides bilingual early childhood education, family support, and out-of-school programs to low-income households in the D.C. metropolitan area. The organization partnered with third-party forensic specialists to investigate the breach and has since notified potentially affected individuals. Compromised data includes: - Dates of birth - Social Security numbers - Driver’s license or government ID numbers - Passport numbers - Financial account information - Medical and health insurance details The law firm Shamis & Gentile P.A., which specializes in data breach class actions, is investigating the incident and potential legal recourse for impacted individuals. Those affected may be eligible for compensation.