We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Education Ransomware Victims & Data Breaches

BREACH HOUSE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Breach House is tracking 1151 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as October 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

Education Victims Page 8 / 12

Type Target Source Discovered Country Intel Link
Ransomware South St Paul Public Schools View Details blacksuit United States
Ransomware education.eeb-lost View Details stormous Lebanon
Ransomware dhanisisd.net View Details lockbit3 United States
Ransomware Judge Rotenberg Center View Details blacksuit United States
Ransomware SJCME.EDU View Details clop United States
Ransomware central.k12.or.us View Details lockbit3 United States
Ransomware Sophiahemmet University View Details medusa Sweden
Ransomware Orange Public School District View Details incransom United States
Ransomware PEDDIE.ORG View Details clop United States
Ransomware Webber International University View Details ransomhouse United States
Ransomware River Delta Unified School District View Details meow United States
Ransomware Nekoosa School District View Details akira United States
Ransomware auruminstitute.org View Details lockbit3 South Africa
Ransomware robs.org View Details lockbit3 United States
Ransomware grotonschools.org View Details lockbit3 United States
Ransomware macqueeneq.com View Details lockbit3 United States
Ransomware themisbourne.co.uk View Details lockbit3 United Kingdom
Ransomware clackamas.edu View Details lockbit3 United States
Ransomware Castilleja School View Details akira United States
Ransomware Waterford Country School Inc View Details incransom United States
Ransomware North American University View Details incransom United States
Ransomware icn-artem.com View Details lockbit3 France
Ransomware stjohnrochester.org View Details lockbit3 United States
Ransomware evit.edu View Details lockbit3 United States
Ransomware Groveport Madison Schools View Details blacksuit United States
Ransomware American International College View Details unsafe United States
Ransomware Washington School For The Deaf View Details incransom United States
Ransomware Blackburn College View Details akira United States
Ransomware Van Buren Public Schools View Details akira United States
Ransomware Kershaw County School District View Details blacksuit United States
Ransomware Aspiration Training View Details rhysida United Kingdom
Ransomware richmont.edu View Details lockbit3 United States
Ransomware Blaine County Schools View Details blacksuit United States
Ransomware Ono Academic College View Details malekteam —
Ransomware denford.co.uk View Details lockbit3 United Kingdom
Ransomware rmutto.ac.th View Details stormous Thailand
Ransomware The International School of Management View Details 8base Germany
Ransomware mtsd-vt.org View Details lockbit3 —
Ransomware New York School of Interior Design View Details incransom —
Ransomware Baden View Details dragonforce Switzerland
Ransomware Tulane University View Details meow —
Ransomware Hinsdale School District View Details medusa United States
Ransomware The Glendale Unified School District View Details medusa United States
Ransomware Technical University of Mombasa View Details siegedsec Kenya
Ransomware usherbrooke.ca View Details lockbit3 Canada
Ransomware Campbell County Schools View Details medusa —
Ransomware Henry County Schools View Details blacksuit United States
Ransomware Full access to the school network USA View Details everest —
Ransomware ychlccsc.edu.hk View Details lockbit3 Hong Kong
Ransomware Nida Corp View Details noescape —
Ransomware bboed.org View Details lockbit3 —
Ransomware Dörr Group View Details alphv Germany
Ransomware DePauw University View Details blacksuit India
Ransomware Science History Institute View Details noescape —
Ransomware New River Community Technical College View Details blacksuit United States
Ransomware Great Valley School District View Details medusa —
Ransomware hi-schoolpharmacy.com View Details lockbit3 —
Ransomware Bangkok University View Details rhysida Thailand
Ransomware NC Central University View Details rhysida —
Ransomware New River Community & Technical College View Details blacksuit United States
Ransomware TXWES.EDU View Details clop United States
Ransomware St Edmund's College & Prep School View Details rhysida —
Ransomware Select Education Group View Details blacksuit United States
Ransomware Decatur Independent School District View Details incransom —
Ransomware thewalkerschool View Details alphv —
Ransomware aegean.gr View Details lockbit3 Greece
Ransomware thewalkerschool.org View Details lockbit3 —
Ransomware foley.k12.mn.us View Details lockbit3 —
Ransomware Hopewell Area School District View Details medusa —
Ransomware jewell.edu View Details lockbit3 United States
Ransomware microtrain.net View Details lockbit3 —
Ransomware lafase.cl View Details lockbit3 France
Ransomware GO! Handelsschool Aalst View Details rhysida Belgium
Ransomware riohondo.edu View Details lockbit3 United States
Ransomware Stanford University View Details akira —
Ransomware Ancillae-Assumpta Academy View Details snatch —
Ransomware University of Defence - Full Leak View Details monti —
Ransomware Central University of Bayamón View Details noescape Puerto Rico
Ransomware International Community Schools View Details noescape —
Ransomware Ada-Borup-West School View Details medusalocker —
Ransomware UK Stratton Primary School View Details hunters United Kingdom
Ransomware Royal College of Physicians and Surgeonsof Glasgow View Details akira United Kingdom
Ransomware Rotorcraft Leasing Company View Details 0mega —
Ransomware Boise Rescue Mission Ministries View Details alphv —
Ransomware Islamic Azad University Electronic Campus View Details arvinclub Iran, Islamic Republic of
Ransomware Cleveland City Schools View Details incransom United States
Ransomware Alliance Virgil Roberts Leadership Academy View Details snatch —
Ransomware Southern Arkansas University View Details rhysida —
Ransomware Islamic Azad University of Shiraz View Details arvinclub Iran, Islamic Republic of
Ransomware University Obrany - Part 2 (Tiny Leak) View Details monti —
Ransomware Learning Partnership West - Leaked View Details ragnarlocker United Kingdom
Ransomware University of Defence - Part 1 View Details monti Czechia
Ransomware Hochschule Furtwangen University View Details alphv Germany
Ransomware Lutheran Church and Preschool View Details bianlian —
Ransomware Merced City School District View Details losttrust —
Ransomware Morgan School District View Details losttrust —
Ransomware Jersey College View Details losttrust United States
Ransomware Immanuel Christian School View Details losttrust —
Ransomware Marlboro Township Public School View Details losttrust United States
Ransomware Ort Harmelin College of Engineering View Details rhysida —

Explore other industry sectors