Education Ransomware Victims & Data Breaches

Breach House is tracking 1053 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 64 incransom 54 vicesociety 52 rhysida 44 medusa 41 pysa 40 clop 35

Top countries for Education attacks

United States 420 United Kingdom 64 France 31 Germany 28 Canada 27 Australia 20 India 16 Brazil 13

Education Victims Page 1 / 11

Type Target Source Discovered Country Intel Link
Ransomware The Nueva School View Details qilin United States
Ransomware formasuniversales.com View Details krybit Mexico
Ransomware sanaa View Details Black X Yemen
Ransomware Landesbibliothek Coburg View Details thegentlemen Germany
Ransomware Saint George's School View Details cmdorganization Colombia
Ransomware Cedar Crest College View Details nightspire United States
Ransomware Ifage View Details dragonforce Switzerland
Ransomware WH Müller View Details Deadlock Germany
Ransomware IFC Eur View Details Deadlock Germany
Ransomware Mount Royal University View Details cmdorganization Canada
Ransomware Richmont Graduate University View Details AiLock United States
Ransomware stedwardscatholicfirstschool.co.uk View Details safepay United Kingdom
Ransomware Musashino University View Details qilin Japan
Ransomware NASCO View Details qilin United States
Ransomware Official Statement: Protecting palatineschool.org Infrastructure View Details stormous United States
Ransomware Driving School Software View Details PrinzEugen United States
Ransomware sansilvestre.edu.pe View Details krybit Peru
Ransomware Reynella East College View Details interlock Australia
Ransomware bits-pilani.ac.in View Details dragonforce India
Ransomware Editora Irmãos Vitale View Details payload Brazil
Ransomware greyhighschool.com View Details lockbit5 United States
Ransomware Misericórdia de Santo Tirso View Details qilin Portugal
Ransomware icc.edu View Details shinyhunters United States
Ransomware moody.edu View Details shinyhunters United States
Ransomware glendale.edu View Details shinyhunters United States
Ransomware hccs.edu View Details shinyhunters United States
Ransomware Kozminski University View Details thegentlemen Poland
Ransomware Silsbee Police Department View Details nightspire United States
Ransomware shottermill-jun.surrey.sch.uk View Details lockbit5 United Kingdom
Ransomware vth.nl View Details lockbit5 Netherlands
Ransomware delano.k12.mn.us View Details lockbit5 United States
Ransomware uni-china.com View Details lockbit5 China
Ransomware Global Schools Foundation View Details fulcrumsec Singapore
Ransomware nottingham.ac.uk View Details shinyhunters United Kingdom
Ransomware Kinetic Education View Details qilin Australia
Ransomware Institucion Cervantes View Details thegentlemen Argentina
Ransomware Universitas Nasional View Details nova Indonesia
Ransomware Krum Public Library View Details nightspire United States
Ransomware SeeWriteHear View Details cmdorganization United Kingdom
Ransomware School Facility Consultants View Details abyss —
Ransomware Lake Washington School District View Details cmdorganization United States
Ransomware UEI College View Details termite United States
Ransomware Daegu University AI Department View Details nova Korea, Republic of
Ransomware Mindpath College Health View Details qilin United States
Ransomware Alamo Heights School District View Details qilin United States
Ransomware My English House academy View Details nova Spain
Ransomware ctps.tp.edu.tw View Details krybit Taiwan, Province of China
Ransomware North Dallas Shared Ministries View Details cmdorganization United States
Ransomware Meirc training and consulting View Details incransom United Arab Emirates
Ransomware Prologic Construction View Details dragonforce Canada
Ransomware Hotelogix Company (Hotelogix.com) View Details shadowbyt3$ India
Ransomware Wysza Szkoa Biznesu National Louis University View Details nova Poland
Ransomware University of Finance and Administration View Details thegentlemen Czechia
Ransomware Berlinmobil.de View Details safepay Germany
Ransomware bergen1.net View Details incransom United States
Ransomware Don Bosco Technical Institute of Makati View Details nova Philippines
Ransomware Australian College of Business Intelligence View Details qilin Australia
Ransomware Tower View Primary School View Details rhysida United Kingdom
Ransomware PowerCampus View Details shadowbyt3$ India
Ransomware Gorey Community School View Details payload Ireland
Ransomware dentoncalvary.org View Details lockbit5 United States
Ransomware st-annes.uk.com View Details lynx United Kingdom
Ransomware Houghton Mifflin Harcourt Company View Details shinyhunters United States
Ransomware Colegio Notre Dame Campinas View Details thegentlemen Brazil
Ransomware Beaconhouse School System View Details thegentlemen Pakistan
Ransomware Desert Christian Schools (DCS) View Details Bavacai United States
Ransomware Académie de Montpellier / CSJM View Details Bavacai France
Ransomware Académie de Montpellier / CSJM View Details medusalocker France
Ransomware Colegio María Inmaculada (CMI) View Details Bavacai Costa Rica
Ransomware Colegio María Inmaculada (CMI) View Details medusalocker Costa Rica
Ransomware Instructure Holdings, Inc. (Canva LMS, instructure.com) View Details shinyhunters United States
Ransomware Follett Software LLC View Details shinyhunters United States
Ransomware Blanchard View Details payoutsking United States
Ransomware Eduporium View Details qilin United States
Ransomware certifiedinfosec.com View Details apt73 United States
Ransomware mahidol.ac.th View Details apt73 Thailand
Ransomware bg.ac.rs View Details apt73 Serbia
Ransomware alx-pc.com View Details apt73 Germany
Ransomware St Stephens International View Details thegentlemen United Kingdom
Ransomware Udemy, Inc. (udemy.com) View Details shinyhunters United States
Ransomware Roman Catholic Archdiocese of St John View Details qilin Canada
Ransomware st-bernards.bham.sch.uk View Details safepay United Kingdom
Ransomware Qatar Biomedical Research Institute (QBRI) View Details crypto24 Qatar
Ransomware Franziskusschule Wilhelmshaven View Details payload Germany
Ransomware Uniwersytet Warszawski View Details interlock Poland
Ransomware UOM University View Details coinbasecartel Malta
Ransomware La Maison Bleue France View Details coinbasecartel France
Ransomware zsfh.cz View Details lockbit5 Czechia
Ransomware McGraw Hill, Inc. (mheducation.com) View Details shinyhunters United States
Ransomware www.campbell.edu View Details incransom United States
Ransomware Win Academy View Details thegentlemen India
Ransomware CCCKeito.edu.hk View Details krybit Hong Kong
Ransomware UNIV LILLE View Details lapsus$ France
Ransomware lkc.ac.bw View Details krybit Botswana
Ransomware Community College of Beaver County View Details interlock United States
Ransomware fhw-neukoelln.de View Details dragonforce Germany
Ransomware Alamo Heights School District View Details worldleaks United States
Ransomware Notre-Dame du Grandchamp View Details nightspire France
Ransomware Catalyst Learning Company View Details genesis United States
Ransomware San Felipe Del Rio CISD School View Details worldleaks United States

Explore other industry sectors

Other 7123 Communication / Marketing 4998 Services 2742 Finance / Legal / Insurance 2520 Manufacturing / Engineering 2054 Healthcare / Pharma 1714 Public Sector 1606 IT 1523 Construction / Real Estate 1236 Retail / E-commerce 773 Energy 722 Transportation / Travel / Logistics 627 All sectors →