We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Education Ransomware Victims & Data Breaches

DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 1151 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as October 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

Education Victims Page 12 / 12

Type Target Source Discovered Country Intel Link
Ransomware Illinois Valley Community College View Details pysa —
Ransomware Upper Columbia Academy View Details pysa —
Ransomware Uxbridge College View Details pysa —
Ransomware Myerscough College View Details pysa —
Ransomware Winters Independent School District View Details pysa —
Ransomware Affinity Education View Details pysa —
Ransomware Merchant Taylors' School View Details pysa —
Ransomware St. Mary School Hyde Park View Details pysa —
Ransomware Brookfield Public Schools View Details pysa —
Ransomware Salesianum School View Details pysa —
Ransomware Palos Community Consolidated School District 118 View Details pysa —
Ransomware The FitzWimark School View Details pysa —
Ransomware Bridgwater & Taunton College View Details pysa —
Ransomware Prairie View A&M University View Details pysa —
Ransomware Cleveland Institute of Music View Details pysa —
Ransomware Fairfax University of America View Details pysa —
Ransomware Zionsville Community Schools View Details pysa —
Ransomware Baldwin Wallace University View Details pysa —
Ransomware Florence-Darlington Technical College View Details pysa —
Ransomware Immanuel Lutheran Church and School View Details pysa —
Ransomware Millersville University View Details pysa —
Ransomware Gering Public Schools View Details pysa —
Ransomware Affton School District View Details pysa —
Ransomware Zane State College View Details pysa —
Ransomware Buffalo Schools View Details pysa —
Ransomware St Bede's College View Details pysa —
Ransomware Logansport Community School Corporation View Details pysa —
Ransomware Newcomb Secondary College View Details avaddon —
Ransomware Leiden University Hacked View Details arvinclub —
Ransomware Booneville School District View Details grief United States
Ransomware Lancaster Independent School District View Details grief United States
Ransomware Clover Park School District View Details grief United States
Ransomware Visalia Unified School District View Details ryuk United States
Ransomware Unnamed biomolecular institute View Details ryuk —
Ransomware Toledo Public Schools (TPS) View Details maze United States
Ransomware Haberdashers’ Monmouth Schools View Details revil —
Ransomware Newcastle University View Details doppelpaymer —
Ransomware Haywood County School District View Details suncrypt United States
Ransomware Columbia College of Chicago View Details netwalker United States
Ransomware University of San Francisco (UCSF) View Details netwalker United States
Ransomware Michigan State University View Details netwalker United States
Ransomware Havre Public Schools View Details ryuk United States
Ransomware Mountain View Los Altos Union High School District View Details revil United States
Ransomware Lakeland Community College View Details maze United States
Ransomware Las Cruces Public School District View Details ryuk United States
Ransomware Cherry Hill School District View Details ryuk United States
Ransomware Rockville Centre School District View Details ryuk United States
Ransomware Monroe County School District View Details gandcrab United States
Ransomware Mississippi Valley State University View Details samsam United States
Ransomware University of Calgary View Details samsam Canada
Ransomware Grant County Education Service District View Details scarab United States

Explore other industry sectors