We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Education Ransomware Victims & Data Breaches

DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 1151 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as October 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

Education Victims Page 1 / 12

Type Target Source Discovered Country Intel Link
Ransomware INTI International University & Colleges View Details rhysida Malaysia
Ransomware UDIMA View Details qilin Spain
Ransomware Programs for Parents, Inc. View Details Booba Project United States
Ransomware Marie Kruses Skole View Details thegentlemen United States
Ransomware The Anglican International School View Details Global Secret Group Israel
Ransomware UPDATE: UNM View Details BYOD United States
Ransomware University of New Mexico View Details BYOD United States
Ransomware Burnaby Schools - School District 41 View Details qilin Canada
Ransomware dorsiacademy.it View Details lockbit5 Italy
Ransomware Coastal Alabama Community College View Details interlock United States
Ransomware Chicago Vein Institute View Details Booba Project United States
Ransomware Seminole Schools View Details Global Secret Group United States
Ransomware American Campus View Details Helix United States
Ransomware LLANO INDEPENDENT SCHOOL DISTRICT View Details qilin United States
Ransomware LEARN is a Regional Educational Service Center www.learn.k12.ct.us View Details blacknevas United States
Ransomware Wellington College International School Bangkok View Details thegentlemen Thailand
Ransomware Saga University View Details thegentlemen Japan
Ransomware Museum Siam View Details thegentlemen Thailand
Ransomware St Peters Anglican Primary School View Details thegentlemen Australia
Ransomware 🇨🇱 Universidad Mayor View Details direwolf Chile
Ransomware 🇺🇸 Arizona State University (ASU) View Details direwolf United States
Ransomware 🇬🇧 Studee View Details direwolf United States
Ransomware 🇺🇸 Deer Creek-Mackinaw CUSD View Details direwolf United States
Ransomware Joliet Public Schools District 86 View Details qilin United States
Ransomware Friendship Christian School View Details qilin United States
Ransomware University of Rostock View Details Panzer Germany
Ransomware Beni Suef Technological University – BTU View Details UmBra Egypt
Ransomware KOOKABARRA JUICE View Details Vexy Ransomware Australia
Ransomware Philander Smith University View Details EndZone United States
Ransomware Champaign Unit 4 School District View Details VYPR United States
Ransomware ENKA Schools View Details Doommageddon Türkiye
Ransomware Westrop Primary & Nursery School View Details thegentlemen United Kingdom
Ransomware The Official Collegeof Architects of León (COAL) View Details akira Mexico
Ransomware University of Illinois Chicago View Details Booba Project United States
Ransomware Slate Valley Unified School District View Details kairos United States
Ransomware VUS - The English Center View Details thegentlemen Viet Nam
Ransomware iccsi.com View Details m3rx United States
Ransomware stjames.wa.edu.au View Details threeam Australia
Ransomware Catholic University of El Salvador View Details Wallstreet El Salvador
Ransomware SMAPCENTER-UAH.EDU View Details clop United States
Ransomware UNISALLE-EDU.CO View Details clop Colombia
Ransomware vit.ac.in View Details AuditTeam India
Ransomware Spo**** Schools View Details nightspire United States
Ransomware Siddhi Green Excellence Pvt. Ltd View Details Orova India
Ransomware Quy Nhon University View Details Vexy Ransomware Viet Nam
Ransomware www.kendallhunt.com View Details incransom United States
Ransomware Universitt Hamburg View Details Panzer Germany
Ransomware Westbridge Institute of Technology, Inc. View Details emperador United States
Ransomware Odyssey Charter School, Inc. View Details Wallstreet United States
Ransomware Springfield Public Schools View Details interlock United States
Ransomware Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC View Details insomnia United States
Ransomware Dublin City Schools GA View Details Eclipse United States
Ransomware Sutton Public Schools View Details global United States
Ransomware University of San Francisco View Details thegentlemen United States
Ransomware TrainMe View Details direwolf Colombia
Ransomware Hochschule Heilbronn Bildungscampus View Details Panzer Germany
Ransomware Westfield Public School District View Details incransom United States
Ransomware Uak University View Details qilin Türkiye
Ransomware Total Education Solutions View Details Wallstreet United States
Ransomware vedantaainstitute.in View Details krybit India
Ransomware Newton County School System View Details qilin United States
Ransomware Directorate-General for Education View Details Panzer Portugal
Ransomware Sprachakademie Rhein-Ruhr View Details Storm Germany
Ransomware Jgsee View Details medusalocker Thailand
Ransomware Brazosport College View Details qilin United States
Ransomware Knottingham Trent University View Details ShadowByt3$ United Kingdom
Ransomware Meducar: Telemedicine and Patient Management System View Details kazu Brazil
Ransomware Southeastern Oklahoma State University View Details interlock United States
Ransomware Albania's Official National Teacher Training Portal View Details emperador Albania
Ransomware Albania's official national teacher training portal. View Details emperador Albania
Ransomware Columbia University Information (Dental) View Details Global Secret Group United States
Ransomware BEDC.COM.AU View Details incransom Australia
Ransomware SMAPCENTER.UAH.EDU View Details clop United States
Ransomware Hong Kong Baptist University View Details thegentlemen Hong Kong
Ransomware Université Libre de Bruxelles View Details qilin Belgium
Ransomware CLLS Co Ltd View Details qilin Singapore
Ransomware uva.edu.br View Details L Group Brazil
Ransomware EduSpa View Details dragonforce United States
Ransomware St Theresa Catholic Church View Details Orova United States
Ransomware Surakarta University View Details Panzer Indonesia
Ransomware Laurel Institutes View Details Dark Project United States
Ransomware Loyalist College View Details incransom Canada
Ransomware cesmac.edu.br View Details krybit Brazil
Ransomware Integrated Site Management View Details Orova United States
Ransomware Baicizhan View Details dragonforce China
Ransomware adventusasia.com View Details lockbit5 Singapore
Ransomware Newcastle University View Details ExfilSquad United Kingdom
Ransomware District of Columbia Public Schools View Details ExfilSquad United States
Ransomware upland.k12.ca.us View Details safepay United States
Ransomware Kean University View Details qilin United States
Ransomware Highline Community College View Details qilin United States
Ransomware Salida Union School District View Details qilin United States
Ransomware St. Francis Xavier Catholic School System View Details worldleaks United States
Ransomware College O'Sullivan de Québec View Details kairos Canada
Ransomware Collge O'Sullivan de Québec View Details kairos Canada
Ransomware Universidad Nacional de Mar del Plata View Details nova Argentina
Ransomware PP+K View Details qilin Brazil
Ransomware The Nueva School View Details qilin United States
Ransomware formasuniversales.com View Details krybit Mexico
Ransomware sanaa View Details Black X Yemen

Explore other industry sectors