Education Ransomware Victims & Data Breaches

BREACH HOUSE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Breach House is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

Education Victims Page 12 / 12

Type Target Source Discovered Country Intel Link
Ransomware Visalia Unified School District View Details ryuk United States
Ransomware Unnamed biomolecular institute View Details ryuk
Ransomware Toledo Public Schools (TPS) View Details maze United States
Ransomware Haberdashers’ Monmouth Schools View Details revil
Ransomware Newcastle University View Details doppelpaymer
Ransomware Haywood County School District View Details suncrypt United States
Ransomware Columbia College of Chicago View Details netwalker United States
Ransomware University of San Francisco (UCSF) View Details netwalker United States
Ransomware Michigan State University View Details netwalker United States
Ransomware Havre Public Schools View Details ryuk United States
Ransomware Mountain View Los Altos Union High School District View Details revil United States
Ransomware Lakeland Community College View Details maze United States
Ransomware Las Cruces Public School District View Details ryuk United States
Ransomware Cherry Hill School District View Details ryuk United States
Ransomware Rockville Centre School District View Details ryuk United States
Ransomware Monroe County School District View Details gandcrab United States
Ransomware Mississippi Valley State University View Details samsam United States
Ransomware University of Calgary View Details samsam Canada
Ransomware Grant County Education Service District View Details scarab United States

Explore other industry sectors