Education Ransomware Victims & Data Breaches

Breach House is tracking 1064 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 68 incransom 54 vicesociety 52 rhysida 44 medusa 41 pysa 40 clop 35

Top countries for Education attacks

United States 426 United Kingdom 65 France 31 Canada 29 Germany 28 Australia 20 India 16 Brazil 14

Education Victims Page 1 / 11

Type Target Source Discovered Country Intel Link
Ransomware Newcastle University View Details ExfilSquad United Kingdom
Ransomware District of Columbia Public Schools View Details ExfilSquad United States
Ransomware upland.k12.ca.us View Details safepay United States
Ransomware Kean University View Details qilin United States
Ransomware Highline Community College View Details qilin United States
Ransomware Salida Union School District View Details qilin United States
Ransomware St. Francis Xavier Catholic School System View Details worldleaks United States
Ransomware College O'Sullivan de Québec View Details kairos Canada
Ransomware Collge O'Sullivan de Québec View Details kairos Canada
Ransomware Universidad Nacional de Mar del Plata View Details nova Argentina
Ransomware PP+K View Details qilin Brazil
Ransomware The Nueva School View Details qilin United States
Ransomware formasuniversales.com View Details krybit Mexico
Ransomware sanaa View Details Black X Yemen
Ransomware Landesbibliothek Coburg View Details thegentlemen Germany
Ransomware Saint George's School View Details cmdorganization Colombia
Ransomware Cedar Crest College View Details nightspire United States
Ransomware Ifage View Details dragonforce Switzerland
Ransomware WH Müller View Details Deadlock Germany
Ransomware IFC Eur View Details Deadlock Germany
Ransomware Mount Royal University View Details cmdorganization Canada
Ransomware Richmont Graduate University View Details AiLock United States
Ransomware stedwardscatholicfirstschool.co.uk View Details safepay United Kingdom
Ransomware Musashino University View Details qilin Japan
Ransomware NASCO View Details qilin United States
Ransomware Official Statement: Protecting palatineschool.org Infrastructure View Details stormous United States
Ransomware Driving School Software View Details PrinzEugen United States
Ransomware sansilvestre.edu.pe View Details krybit Peru
Ransomware Reynella East College View Details interlock Australia
Ransomware bits-pilani.ac.in View Details dragonforce India
Ransomware Editora Irmãos Vitale View Details payload Brazil
Ransomware greyhighschool.com View Details lockbit5 United States
Ransomware Misericórdia de Santo Tirso View Details qilin Portugal
Ransomware icc.edu View Details shinyhunters United States
Ransomware moody.edu View Details shinyhunters United States
Ransomware glendale.edu View Details shinyhunters United States
Ransomware hccs.edu View Details shinyhunters United States
Ransomware Kozminski University View Details thegentlemen Poland
Ransomware Silsbee Police Department View Details nightspire United States
Ransomware shottermill-jun.surrey.sch.uk View Details lockbit5 United Kingdom
Ransomware vth.nl View Details lockbit5 Netherlands
Ransomware delano.k12.mn.us View Details lockbit5 United States
Ransomware uni-china.com View Details lockbit5 China
Ransomware Global Schools Foundation View Details fulcrumsec Singapore
Ransomware nottingham.ac.uk View Details shinyhunters United Kingdom
Ransomware Kinetic Education View Details qilin Australia
Ransomware Institucion Cervantes View Details thegentlemen Argentina
Ransomware Universitas Nasional View Details nova Indonesia
Ransomware Krum Public Library View Details nightspire United States
Ransomware SeeWriteHear View Details cmdorganization United Kingdom
Ransomware School Facility Consultants View Details abyss —
Ransomware Lake Washington School District View Details cmdorganization United States
Ransomware UEI College View Details termite United States
Ransomware Daegu University AI Department View Details nova Korea, Republic of
Ransomware Mindpath College Health View Details qilin United States
Ransomware Alamo Heights School District View Details qilin United States
Ransomware My English House academy View Details nova Spain
Ransomware ctps.tp.edu.tw View Details krybit Taiwan, Province of China
Ransomware North Dallas Shared Ministries View Details cmdorganization United States
Ransomware Meirc training and consulting View Details incransom United Arab Emirates
Ransomware Prologic Construction View Details dragonforce Canada
Ransomware Hotelogix Company (Hotelogix.com) View Details shadowbyt3$ India
Ransomware Wysza Szkoa Biznesu National Louis University View Details nova Poland
Ransomware University of Finance and Administration View Details thegentlemen Czechia
Ransomware Berlinmobil.de View Details safepay Germany
Ransomware bergen1.net View Details incransom United States
Ransomware Don Bosco Technical Institute of Makati View Details nova Philippines
Ransomware Australian College of Business Intelligence View Details qilin Australia
Ransomware Tower View Primary School View Details rhysida United Kingdom
Ransomware PowerCampus View Details shadowbyt3$ India
Ransomware Gorey Community School View Details payload Ireland
Ransomware dentoncalvary.org View Details lockbit5 United States
Ransomware st-annes.uk.com View Details lynx United Kingdom
Ransomware Houghton Mifflin Harcourt Company View Details shinyhunters United States
Ransomware Colegio Notre Dame Campinas View Details thegentlemen Brazil
Ransomware Beaconhouse School System View Details thegentlemen Pakistan
Ransomware Desert Christian Schools (DCS) View Details Bavacai United States
Ransomware Académie de Montpellier / CSJM View Details Bavacai France
Ransomware Académie de Montpellier / CSJM View Details medusalocker France
Ransomware Colegio María Inmaculada (CMI) View Details Bavacai Costa Rica
Ransomware Colegio María Inmaculada (CMI) View Details medusalocker Costa Rica
Ransomware Instructure Holdings, Inc. (Canva LMS, instructure.com) View Details shinyhunters United States
Ransomware Follett Software LLC View Details shinyhunters United States
Ransomware Blanchard View Details payoutsking United States
Ransomware Eduporium View Details qilin United States
Ransomware certifiedinfosec.com View Details apt73 United States
Ransomware mahidol.ac.th View Details apt73 Thailand
Ransomware bg.ac.rs View Details apt73 Serbia
Ransomware alx-pc.com View Details apt73 Germany
Ransomware St Stephens International View Details thegentlemen United Kingdom
Ransomware Udemy, Inc. (udemy.com) View Details shinyhunters United States
Ransomware Roman Catholic Archdiocese of St John View Details qilin Canada
Ransomware st-bernards.bham.sch.uk View Details safepay United Kingdom
Ransomware Qatar Biomedical Research Institute (QBRI) View Details crypto24 Qatar
Ransomware Franziskusschule Wilhelmshaven View Details payload Germany
Ransomware Uniwersytet Warszawski View Details interlock Poland
Ransomware UOM University View Details coinbasecartel Malta
Ransomware La Maison Bleue France View Details coinbasecartel France
Ransomware zsfh.cz View Details lockbit5 Czechia
Ransomware McGraw Hill, Inc. (mheducation.com) View Details shinyhunters United States

Explore other industry sectors

Other 7165 Communication / Marketing 5001 Services 2748 Finance / Legal / Insurance 2552 Manufacturing / Engineering 2125 Healthcare / Pharma 1727 Public Sector 1618 IT 1580 Construction / Real Estate 1261 Retail / E-commerce 800 Energy 731 Transportation / Travel / Logistics 647 All sectors →