Education Ransomware Victims & Data Breaches

Breach House is tracking 1037 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as June 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 61 incransom 54 vicesociety 52 rhysida 44 medusa 41 pysa 40 clop 37

Top countries for Education attacks

United States 414 United Kingdom 63 France 31 Canada 26 Germany 25 Australia 19 India 15 Brazil 12

Education Victims Page 4 / 11

Type Target Source Discovered Country Intel Link
Ransomware Kalamazoo Public School District View Details interlock United States
Ransomware Rivers Academy West London View Details incransom United Kingdom
Ransomware Colegio de la Compania de Maria Vigo View Details arcusmedia Spain
Ransomware npfy.org View Details incransom United States
Ransomware Sao Camilo Cachoeiro de Itapemirim View Details rhysida Brazil
Ransomware ratnasagar.com View Details J India
Ransomware North Kitsap School District View Details nightspire United States
Ransomware Fowler Elementary School View Details interlock United States
Ransomware rfsd13.org View Details qilin —
Ransomware Coop UQAM View Details rhysida Canada
Ransomware www.southlandscs.com View Details qilin United States
Ransomware Madison School District Schools View Details interlock United States
Ransomware thederbyhighschool.co.uk View Details kairos United Kingdom
Ransomware bertie.k12.nc.us View Details qilin United States
Ransomware www.nelson.edu View Details qilin United States
Ransomware Dale Partners Architects View Details akira United States
Ransomware Pawnee Heights Unified School District View Details medusa United States
Ransomware trocaire.edu View Details incransom United States
Ransomware Med institute View Details devman —
Ransomware Fall River Public Schools View Details medusa United States
Ransomware St Edmund's College View Details qilin United Kingdom
Ransomware Cherokee County School District View Details interlock United States
Ransomware AKTO View Details nitrogen United States
Ransomware Élan Sportif Nantes View Details ralord France
Ransomware swr.school View Details safepay Germany
Ransomware Forrest City School District View Details rhysida United States
Ransomware ec-nantes.fr View Details ralord France
Ransomware saiedu.fi View Details safepay Finland
Ransomware Okeene Elementary School View Details rhysida United States
Ransomware Aztec Municipal School District View Details interlock United States
Ransomware Big Horn County School District #4 View Details medusa United States
Ransomware Baltimorecityschools View Details cloak United States
Ransomware Newtown Friends School (newtownfriends.org) View Details fog United States
Ransomware warmsworth.doncaster.sch.uk View Details incransom United Kingdom
Ransomware nrru.ac.th - University View Details babuk2 Thailand
Ransomware web.asia.edu.tw - Taiwan (Asia University) View Details babuk2 Taiwan, Province of China
Ransomware web.asia.edu.tw - Taiwan (Asia University) View Details babuk2 Taiwan, Province of China
Ransomware El Camino Real Academy (elcaminorealacademy) View Details fog United States
Ransomware CAHOKIA CUSD 187 SCHOOL DISTRICT View Details qilin United States
Ransomware tradingacademy.com View Details safepay United States
Ransomware Urgent Warning to University of Rennes – Negotiate Now! View Details funksec France
Ransomware France Universités View Details funksec France
Ransomware Asia University Hospital View Details crazyhunter Taiwan, Province of China
Ransomware Asia University View Details crazyhunter Taiwan, Province of China
Ransomware univ-rennes.fr View Details funksec France
Ransomware Hancock Public School View Details interlock United States
Ransomware sorbonne-universite.fr View Details funksec France
Ransomware www.portlandschools.org View Details ransomhub United States
Ransomware WJCC Public Schools (wjccschools.org) View Details fog United States
Ransomware EXCELLED.COM View Details clop United States
Ransomware PITSCO.COM View Details clop United States
Ransomware KWIKGOAL.COM View Details clop United States
Ransomware Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography View Details ddosecret Russian Federation
Ransomware Dept of Education of the Strezhevoy City District Administration View Details ddosecret —
Ransomware Andrew Tate's The Real World (Hustler's University) View Details ddosecret —
Ransomware Laurens School District 56 View Details medusa United States
Ransomware www.wpisd.com View Details ransomhub United States
Ransomware Novi Community School District View Details killsec United States
Ransomware www.riverdale.edu View Details ransomhub United States
Ransomware ehdd.com View Details incransom United States
Ransomware Hochschule View Details fog Germany
Ransomware danecourt.kent.sch.uk View Details kairos United Kingdom
Ransomware Greencastle-Antrim Senior High School (gcasd.org) View Details fog United States
Ransomware Bethany Lutheran Church View Details qilin United States
Ransomware stjerome.org View Details safepay United States
Ransomware CESI View Details termite France
Ransomware Saint George's College (saintgeorge.cl) View Details fog Chile
Ransomware Aurora Public Schools (aurorak12.org) View Details fog United States
Ransomware The University of Notre Dame Australia (nd.edu.au) View Details fog Australia
Ransomware cps.k12.il.us View Details clop United States
Ransomware Brockway Hair Design View Details medusa United States
Ransomware MEDES College View Details medusa Canada
Ransomware Albright Institute View Details killsec Australia
Ransomware Hpisd.org View Details ransomhub United States
Ransomware wwcsd.net View Details ransomhub United States
Ransomware Substitute Teacher Service View Details cicada3301 United States
Ransomware rattelacademy.com View Details funksec Israel
Ransomware topackt.com View Details lockbit3 Germany
Ransomware usuhs.edu View Details lockbit3 United States
Ransomware St. Nicholas School View Details 8base Brazil
Ransomware High Learn Ltd View Details 8base United Kingdom
Ransomware Pembina Trails School Division View Details rhysida Canada
Ransomware tnlottery.com View Details incransom United States
Ransomware Versalys.com View Details qilin Canada
Ransomware muscogee.k12.ga.us View Details safepay United States
Ransomware broward.edu View Details incransom United States
Ransomware lhps.org View Details incransom United States
Ransomware achieverssciencejournal.org View Details funksec Nigeria
Ransomware paradiseschools.org View Details safepay United States
Ransomware De La Salle High School (dlshs.org) View Details fog United States
Ransomware CPS.EDU View Details clop United States
Ransomware Chappell Schools View Details medusa United States
Ransomware Black Hills Regional Eye Institute View Details qilin United States
Ransomware theurswickschool.co.uk View Details kairos United Kingdom
Ransomware gonzalesusd.net View Details safepay United States
Ransomware Kilgore College (kilgore.edu) View Details incransom United States
Ransomware anwsd.org View Details threeam United States
Ransomware The University of Oklahoma (ou.edu) View Details fog United States
Ransomware Wynnewood High School View Details 8base United States
Ransomware mi.edu View Details ransomhub United States

Explore other industry sectors

Other 7080 Communication / Marketing 5018 Services 2750 Finance / Legal / Insurance 2438 Manufacturing / Engineering 1935 Healthcare / Pharma 1706 Public Sector 1591 IT 1397 Construction / Real Estate 1176 Energy 714 Retail / E-commerce 707 Transportation / Travel / Logistics 592 All sectors →