Education Ransomware Victims & Data Breaches

Breach House is tracking 1037 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as June 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 61 incransom 54 vicesociety 52 rhysida 44 medusa 41 pysa 40 clop 37

Top countries for Education attacks

United States 414 United Kingdom 63 France 31 Canada 26 Germany 25 Australia 19 India 15 Brazil 12

Education Victims Page 1 / 11

Type Target Source Discovered Country Intel Link
Ransomware Misericórdia de Santo Tirso View Details qilin Portugal
Ransomware icc.edu View Details shinyhunters United States
Ransomware moody.edu View Details shinyhunters United States
Ransomware glendale.edu View Details shinyhunters United States
Ransomware hccs.edu View Details shinyhunters United States
Ransomware Kozminski University View Details thegentlemen Poland
Ransomware Silsbee Police Department View Details nightspire United States
Ransomware shottermill-jun.surrey.sch.uk View Details lockbit5 United Kingdom
Ransomware vth.nl View Details lockbit5 Netherlands
Ransomware delano.k12.mn.us View Details lockbit5 United States
Ransomware uni-china.com View Details lockbit5 China
Ransomware Global Schools Foundation View Details fulcrumsec Singapore
Ransomware nottingham.ac.uk View Details shinyhunters United Kingdom
Ransomware Kinetic Education View Details qilin Australia
Ransomware Institucion Cervantes View Details thegentlemen Argentina
Ransomware Universitas Nasional View Details nova Indonesia
Ransomware Krum Public Library View Details nightspire United States
Ransomware SeeWriteHear View Details cmdorganization United Kingdom
Ransomware School Facility Consultants View Details abyss —
Ransomware Lake Washington School District View Details cmdorganization United States
Ransomware UEI College View Details termite United States
Ransomware Daegu University AI Department View Details nova Korea, Republic of
Ransomware Mindpath College Health View Details qilin United States
Ransomware Alamo Heights School District View Details qilin United States
Ransomware My English House academy View Details nova Spain
Ransomware ctps.tp.edu.tw View Details krybit Taiwan, Province of China
Ransomware North Dallas Shared Ministries View Details cmdorganization United States
Ransomware Meirc training and consulting View Details incransom United Arab Emirates
Ransomware Prologic Construction View Details dragonforce Canada
Ransomware Hotelogix Company (Hotelogix.com) View Details shadowbyt3$ India
Ransomware Wysza Szkoa Biznesu National Louis University View Details nova Poland
Ransomware University of Finance and Administration View Details thegentlemen Czechia
Ransomware Berlinmobil.de View Details safepay Germany
Ransomware bergen1.net View Details incransom United States
Ransomware Don Bosco Technical Institute of Makati View Details nova Philippines
Ransomware Australian College of Business Intelligence View Details qilin Australia
Ransomware Tower View Primary School View Details rhysida United Kingdom
Ransomware PowerCampus View Details shadowbyt3$ India
Ransomware Gorey Community School View Details payload Ireland
Ransomware dentoncalvary.org View Details lockbit5 United States
Ransomware st-annes.uk.com View Details lynx United Kingdom
Ransomware Houghton Mifflin Harcourt Company View Details shinyhunters United States
Ransomware Colegio Notre Dame Campinas View Details thegentlemen Brazil
Ransomware Beaconhouse School System View Details thegentlemen Pakistan
Ransomware Desert Christian Schools (DCS) View Details Bavacai United States
Ransomware Académie de Montpellier / CSJM View Details Bavacai France
Ransomware Académie de Montpellier / CSJM View Details medusalocker France
Ransomware Colegio María Inmaculada (CMI) View Details Bavacai Costa Rica
Ransomware Colegio María Inmaculada (CMI) View Details medusalocker Costa Rica
Ransomware Instructure Holdings, Inc. (Canva LMS, instructure.com) View Details shinyhunters United States
Ransomware Follett Software LLC View Details shinyhunters United States
Ransomware Blanchard View Details payoutsking United States
Ransomware Eduporium View Details qilin United States
Ransomware certifiedinfosec.com View Details apt73 United States
Ransomware mahidol.ac.th View Details apt73 Thailand
Ransomware bg.ac.rs View Details apt73 Serbia
Ransomware alx-pc.com View Details apt73 Germany
Ransomware St Stephens International View Details thegentlemen United Kingdom
Ransomware Udemy, Inc. (udemy.com) View Details shinyhunters United States
Ransomware Roman Catholic Archdiocese of St John View Details qilin Canada
Ransomware st-bernards.bham.sch.uk View Details safepay United Kingdom
Ransomware Qatar Biomedical Research Institute (QBRI) View Details crypto24 Qatar
Ransomware Franziskusschule Wilhelmshaven View Details payload Germany
Ransomware Uniwersytet Warszawski View Details interlock Poland
Ransomware UOM University View Details coinbasecartel Malta
Ransomware La Maison Bleue France View Details coinbasecartel France
Ransomware zsfh.cz View Details lockbit5 Czechia
Ransomware McGraw Hill, Inc. (mheducation.com) View Details shinyhunters United States
Ransomware www.campbell.edu View Details incransom United States
Ransomware Win Academy View Details thegentlemen India
Ransomware CCCKeito.edu.hk View Details krybit Hong Kong
Ransomware UNIV LILLE View Details lapsus$ France
Ransomware lkc.ac.bw View Details krybit Botswana
Ransomware Community College of Beaver County View Details interlock United States
Ransomware fhw-neukoelln.de View Details dragonforce Germany
Ransomware Alamo Heights School District View Details worldleaks United States
Ransomware Notre-Dame du Grandchamp View Details nightspire France
Ransomware Catalyst Learning Company View Details genesis United States
Ransomware San Felipe Del Rio CISD School View Details worldleaks United States
Ransomware giunti.it View Details lockbit5 Italy
Ransomware webster-schools.org View Details lockbit5 United States
Ransomware alcornschools.org View Details lockbit5 United States
Ransomware senai.br View Details lockbit5 Brazil
Ransomware IBB Institut für Bildung und Beratung View Details qilin Germany
Ransomware Monmouth University View Details pear United States
Ransomware jenningsk12.org View Details incransom United States
Ransomware Marion Military Institute View Details worldleaks United States
Ransomware Infinite Campus, Inc. View Details shinyhunters United States
Ransomware Amerinational Management Services (AMS) View Details sinobi United States
Ransomware Cortporation Colina View Details thegentlemen Chile
Ransomware Payap University View Details thegentlemen Thailand
Ransomware Private University View Details pear United States
Ransomware Trinity Catholic High School View Details beast United States
Ransomware Tamir Hayman View Details handala Israel
Ransomware Hebrew University of Jerusalem View Details handala Israel
Ransomware St Fabian Catholic View Details thegentlemen United States
Ransomware Raz Zimmt (head of the Iran Desk at Israeli security institutes) View Details handala Israel
Ransomware Stryker Corporation View Details handala United States
Ransomware Big Brothers Big Sisters View Details nightspire United States
Ransomware Institute of Social Security - Paraguay View Details kairos Paraguay

Explore other industry sectors

Other 7080 Communication / Marketing 5018 Services 2750 Finance / Legal / Insurance 2441 Manufacturing / Engineering 1942 Healthcare / Pharma 1707 Public Sector 1592 IT 1400 Construction / Real Estate 1177 Energy 715 Retail / E-commerce 709 Transportation / Travel / Logistics 593 All sectors →