Education Ransomware Victims & Data Breaches

BREACH HOUSE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Breach House is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 73 incransom 57 vicesociety 52 interlock 48 rhysida 44 medusa 40 pysa 40

Top countries for Education attacks

United States 457 United Kingdom 67 France 32 Germany 30 Canada 30 Australia 22 India 17 Brazil 17

Education Victims Page 6 / 12

Type Target Source Discovered Country Intel Link
Ransomware Wintergreen Learning Materials View Details hunters Canada
Ransomware Rutherford County Schools View Details rhysida United States
Ransomware FunkLocker View Details funksec United States
Ransomware edizionidottrinari View Details funksec Italy
Ransomware www.d47.org View Details ransomhub United States
Ransomware IFA Paris View Details funksec France
Ransomware www.goethe-university-frankfurt.de View Details ransomhub Germany
Ransomware Bedminster School (bedminsterschool.org) View Details fog United States
Ransomware Grandview School District View Details blacksuit United States
Ransomware Vermilion Parish School System View Details rhysida United States
Ransomware glts.net View Details abyss United States
Ransomware isd109.org View Details ransomhub United States
Ransomware maynard.k12.ma.us View Details ransomhub United States
Ransomware inthinking.net View Details darkvault Korea, Republic of
Ransomware BusinessTraining.be View Details safepay Belgium
Ransomware Richmond Hill Primary Academy View Details safepay United Kingdom
Ransomware Burkburnett Independent School District View Details fog United States
Ransomware Istituto di Istruzione Superiore "Giulio Natta" View Details ElDorado Italy
Ransomware Think Simple View Details ElDorado United States
Ransomware Conseil scolaire Viamonde View Details termite Canada
Ransomware UATF View Details stormous Bolivia, Plurinational State of
Ransomware uatf.edu.bo View Details stormous Bolivia, Plurinational State of
Ransomware edwardsburgschoolsfoundation.org View Details chort United States
Ransomware marysville.k12.oh.us View Details blacksuit United States
Ransomware stalyhill-inf.tameside.sch.uk View Details blacksuit United Kingdom
Ransomware www.guymontigers.com View Details ransomhub Australia
Ransomware National Institute of Administration View Details killsec Romania
Ransomware Granite School District View Details rhysida United States
Ransomware Winnebago Public School Foundation View Details interlock United States
Ransomware Winnebago Public School Foundation View Details interlock United States
Ransomware www.msdl.ca View Details ransomhub Canada
Ransomware Lincoln University View Details meow United States
Ransomware Webb Institute View Details incransom United States
Ransomware Fylde Coast Academy Trust View Details rhysida United Kingdom
Ransomware College of Business - Tanzania View Details hellcat Tanzania, United Republic of
Ransomware Ministry of Education - Jordan View Details hellcat Jordan
Ransomware International University of Sarajevo View Details medusa Bosnia and Herzegovina
Ransomware eap.gr View Details ransomhub Greece
Ransomware lsst.ac View Details cactus United Kingdom
Ransomware tlie.org View Details ransomhub United States
Ransomware Spirit Lake Community School District View Details medusa United States
Ransomware Jordan Public Schools (https://www.jordan.k12.mn.us/) View Details fog United States
Ransomware Mastery Schools View Details dragonforce United States
Ransomware guymontigers.com View Details ransomhub Canada
Ransomware Texas Tech University Health Sciences Center View Details interlock United States
Ransomware Evergreen Local School District (evgvikings.org) View Details fog United States
Ransomware omara-ag.com View Details blacksuit Germany
Ransomware appen.com View Details apt73 Australia
Ransomware Goshen Central School District (gcsny.org) View Details fog United States
Ransomware Lincoln University (lincolnu.edu) View Details fog United States
Ransomware rcschools.net View Details blacksuit United States
Ransomware www.chiltonisd.org View Details ransomhub United States
Ransomware Henry County Schools View Details rhysida United States
Ransomware Inner City Education Foundation View Details medusa United States
Ransomware extramarks.com View Details killsec India
Ransomware oklahomasleepinstitute.com View Details threeam United States
Ransomware Universite Paris Sud View Details ransomhouse France
Ransomware Albany College of Pharmacy View Details medusa United States
Ransomware winwinza.com View Details ransomhub Myanmar
Ransomware bbgc.gov.bd View Details killsec Bangladesh
Ransomware sacredheart.southwark.sch.uk View Details threeam United Kingdom
Ransomware gsdwi.org View Details ransomhub Germany
Ransomware Providence Public School Department View Details medusa United States
Ransomware capecodacademy.org View Details ransomhub United States
Ransomware EAGLE School View Details qilin United States
Ransomware Charles Darwin School View Details blacksuit United Kingdom
Ransomware Qeco/coeq View Details rhysida United States
Ransomware Pennsylvania State Education Association View Details rhysida United States
Ransomware Stratford School Academy View Details rhysida United Kingdom
Ransomware briedis.lt View Details ransomhub Lithuania
Ransomware cps-k12.org View Details ransomhub United States
Ransomware www.mineduc.gob.gt View Details ransomhub Guatemala
Ransomware tdsb.on.ca View Details lockbit3 Canada
Ransomware Academy of Model Aeronautics View Details blacksuit United States
Ransomware The University and College Union View Details incransom United Kingdom
Ransomware schoolrush.com View Details killsec United States
Ransomware Life University View Details metaencryptor United States
Ransomware ccsdschools.com View Details ransomhub United States
Ransomware www.martinswood.herts.sch.uk View Details ransomhub United Kingdom
Ransomware ccj.edu.lb View Details qilin Lebanon
Ransomware Y*********I View Details flocker United States
Ransomware brockington.leisc.sch.uk View Details lockbit3 United Kingdom
Ransomware fremontschools.net View Details lockbit3 United States
Ransomware Maryville Academy View Details rhysida United States
Ransomware Ranney School View Details rhysida United States
Ransomware effinghamschools.com View Details ransomhub United States
Ransomware Camp Susque View Details medusa United States
Ransomware St. Thomas Aquinas High School View Details medusa United States
Ransomware www.chsd117.org View Details blacksuit United States
Ransomware New Jersey City University View Details rhysida United States
Ransomware www.neurologicalinstitute.com View Details ransomhub United States
Ransomware Texas Tech University View Details meow United States
Ransomware Odessa College View Details fog United States
Ransomware e21c.co.uk View Details lockbit3 United Kingdom
Ransomware Wichita State University Campus of Applied Sciences and Technology View Details fog —
Ransomware norton.k12.ma.us View Details lockbit3 United States
Ransomware troyareasd.org View Details lockbit3 Armenia
Ransomware joliet86.org View Details lockbit3 United States
Ransomware ZSZAALEJI.cz View Details qilin Czechia
Ransomware Geelong Lutheran College View Details fog —

Explore other industry sectors

Other 7214 Communication / Marketing 5001 Services 2891 Finance / Legal / Insurance 2670 Manufacturing / Engineering 2353 Healthcare / Pharma 2009 IT 1852 Public Sector 1646 Construction / Real Estate 1326 Retail / E-commerce 900 Transportation / Travel / Logistics 807 Energy 749 All sectors →