Education Ransomware Victims & Data Breaches
BREACH HOUSE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Breach House is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1119Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Education
Top countries for Education attacks
Education Victims Page 1 / 12
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Dublin City Schools GA View Details | Eclipse | United States | ||
| Ransomware | Sutton Public Schools View Details | global | United States | ||
| Ransomware | University of San Francisco View Details | thegentlemen | United States | ||
| Ransomware | TrainMe View Details | direwolf | Colombia | ||
| Ransomware | Hochschule Heilbronn Bildungscampus View Details | Panzer | Germany | ||
| Ransomware | Westfield Public School District View Details | incransom | United States | ||
| Ransomware | Uak University View Details | qilin | Türkiye | ||
| Ransomware | Total Education Solutions View Details | Wallstreet | United States | ||
| Ransomware | vedantaainstitute.in View Details | krybit | India | ||
| Ransomware | Newton County School System View Details | qilin | United States | ||
| Ransomware | Directorate-General for Education View Details | Panzer | Portugal | ||
| Ransomware | Sprachakademie Rhein-Ruhr View Details | Storm | Germany | ||
| Ransomware | Jgsee View Details | medusalocker | Thailand | ||
| Ransomware | Brazosport College View Details | qilin | United States | ||
| Ransomware | Knottingham Trent University View Details | ShadowByt3$ | United Kingdom | ||
| Ransomware | Meducar: Telemedicine and Patient Management System View Details | kazu | Brazil | ||
| Ransomware | Southeastern Oklahoma State University View Details | interlock | United States | ||
| Ransomware | Albania's Official National Teacher Training Portal View Details | emperador | Albania | ||
| Ransomware | Albania's official national teacher training portal. View Details | emperador | Albania | ||
| Ransomware | Columbia University Information (Dental) View Details | Global Secret Group | United States | ||
| Ransomware | BEDC.COM.AU View Details | incransom | Australia | ||
| Ransomware | SMAPCENTER.UAH.EDU View Details | clop | United States | ||
| Ransomware | Hong Kong Baptist University View Details | thegentlemen | Hong Kong | ||
| Ransomware | Université Libre de Bruxelles View Details | qilin | Belgium | ||
| Ransomware | CLLS Co Ltd View Details | qilin | Singapore | ||
| Ransomware | uva.edu.br View Details | L Group | Brazil | ||
| Ransomware | EduSpa View Details | dragonforce | United States | ||
| Ransomware | St Theresa Catholic Church View Details | Orova | United States | ||
| Ransomware | Surakarta University View Details | Panzer | Indonesia | ||
| Ransomware | Laurel Institutes View Details | Dark Project | United States | ||
| Ransomware | Loyalist College View Details | incransom | Canada | ||
| Ransomware | cesmac.edu.br View Details | krybit | Brazil | ||
| Ransomware | Integrated Site Management View Details | Orova | United States | ||
| Ransomware | Baicizhan View Details | dragonforce | China | ||
| Ransomware | adventusasia.com View Details | lockbit5 | Singapore | ||
| Ransomware | Newcastle University View Details | ExfilSquad | United Kingdom | ||
| Ransomware | District of Columbia Public Schools View Details | ExfilSquad | United States | ||
| Ransomware | upland.k12.ca.us View Details | safepay | United States | ||
| Ransomware | Kean University View Details | qilin | United States | ||
| Ransomware | Highline Community College View Details | qilin | United States | ||
| Ransomware | Salida Union School District View Details | qilin | United States | ||
| Ransomware | St. Francis Xavier Catholic School System View Details | worldleaks | United States | ||
| Ransomware | College O'Sullivan de Québec View Details | kairos | Canada | ||
| Ransomware | Collge O'Sullivan de Québec View Details | kairos | Canada | ||
| Ransomware | Universidad Nacional de Mar del Plata View Details | nova | Argentina | ||
| Ransomware | PP+K View Details | qilin | Brazil | ||
| Ransomware | The Nueva School View Details | qilin | United States | ||
| Ransomware | formasuniversales.com View Details | krybit | Mexico | ||
| Ransomware | sanaa View Details | Black X | Yemen | ||
| Ransomware | Landesbibliothek Coburg View Details | thegentlemen | Germany | ||
| Ransomware | Saint George's School View Details | cmdorganization | Colombia | ||
| Ransomware | Cedar Crest College View Details | nightspire | United States | ||
| Ransomware | Ifage View Details | dragonforce | Switzerland | ||
| Ransomware | WH Müller View Details | Deadlock | Germany | ||
| Ransomware | IFC Eur View Details | Deadlock | Germany | ||
| Ransomware | Mount Royal University View Details | cmdorganization | Canada | ||
| Ransomware | Richmont Graduate University View Details | AiLock | United States | ||
| Ransomware | stedwardscatholicfirstschool.co.uk View Details | safepay | United Kingdom | ||
| Ransomware | Musashino University View Details | qilin | Japan | ||
| Ransomware | NASCO View Details | qilin | United States | ||
| Ransomware | Official Statement: Protecting palatineschool.org Infrastructure View Details | stormous | United States | ||
| Ransomware | Driving School Software View Details | PrinzEugen | United States | ||
| Ransomware | sansilvestre.edu.pe View Details | krybit | Peru | ||
| Ransomware | Reynella East College View Details | interlock | Australia | ||
| Ransomware | bits-pilani.ac.in View Details | dragonforce | India | ||
| Ransomware | Editora Irmãos Vitale View Details | payload | Brazil | ||
| Ransomware | greyhighschool.com View Details | lockbit5 | United States | ||
| Ransomware | Misericórdia de Santo Tirso View Details | qilin | Portugal | ||
| Ransomware | icc.edu View Details | shinyhunters | United States | ||
| Ransomware | moody.edu View Details | shinyhunters | United States | ||
| Ransomware | glendale.edu View Details | shinyhunters | United States | ||
| Ransomware | hccs.edu View Details | shinyhunters | United States | ||
| Ransomware | Kozminski University View Details | thegentlemen | Poland | ||
| Ransomware | Silsbee Police Department View Details | nightspire | United States | ||
| Ransomware | shottermill-jun.surrey.sch.uk View Details | lockbit5 | United Kingdom | ||
| Ransomware | vth.nl View Details | lockbit5 | Netherlands | ||
| Ransomware | delano.k12.mn.us View Details | lockbit5 | United States | ||
| Ransomware | uni-china.com View Details | lockbit5 | China | ||
| Ransomware | Global Schools Foundation View Details | fulcrumsec | Singapore | ||
| Ransomware | nottingham.ac.uk View Details | shinyhunters | United Kingdom | ||
| Ransomware | Kinetic Education View Details | qilin | Australia | ||
| Ransomware | Institucion Cervantes View Details | thegentlemen | Argentina | ||
| Ransomware | Universitas Nasional View Details | nova | Indonesia | ||
| Ransomware | Krum Public Library View Details | nightspire | United States | ||
| Ransomware | SeeWriteHear View Details | cmdorganization | United Kingdom | ||
| Ransomware | School Facility Consultants View Details | abyss | — | ||
| Ransomware | Lake Washington School District View Details | cmdorganization | United States | ||
| Ransomware | UEI College View Details | termite | United States | ||
| Ransomware | Daegu University AI Department View Details | nova | Korea, Republic of | ||
| Ransomware | Mindpath College Health View Details | qilin | United States | ||
| Ransomware | Alamo Heights School District View Details | qilin | United States | ||
| Ransomware | My English House academy View Details | nova | Spain | ||
| Ransomware | ctps.tp.edu.tw View Details | krybit | Taiwan, Province of China | ||
| Ransomware | North Dallas Shared Ministries View Details | cmdorganization | United States | ||
| Ransomware | Meirc training and consulting View Details | incransom | United Arab Emirates | ||
| Ransomware | Prologic Construction View Details | dragonforce | Canada | ||
| Ransomware | Hotelogix Company (Hotelogix.com) View Details | shadowbyt3$ | India | ||
| Ransomware | Wysza Szkoa Biznesu National Louis University View Details | nova | Poland | ||
| Ransomware | University of Finance and Administration View Details | thegentlemen | Czechia | ||
| Ransomware | Berlinmobil.de View Details | safepay | Germany |