Education Ransomware Victims & Data Breaches

Breach House is tracking 1037 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as June 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 61 incransom 54 vicesociety 52 rhysida 44 medusa 41 pysa 40 clop 37

Top countries for Education attacks

United States 414 United Kingdom 63 France 31 Canada 26 Germany 25 Australia 19 India 15 Brazil 12

Education Victims Page 2 / 11

Type Target Source Discovered Country Intel Link
Ransomware Salford City College View Details qilin United Kingdom
Ransomware Wagon Mound Public Schools View Details interlock United States
Ransomware salfordcc.ac.uk View Details dragonforce United Kingdom
Ransomware Israel Institute for National Security Studies (INSS) View Details handala Israel
Ransomware CHS Villach View Details thegentlemen Austria
Ransomware denmark.k12.wi.us View Details incransom United States
Ransomware Adidas View Details lapsus$ Germany
Ransomware Lille University View Details lapsus$ France
Ransomware American Beauty School View Details akira United States
Ransomware Birmingham Museum of Art View Details termite United States
Ransomware University of Pennsylvania View Details shinyhunters United States
Ransomware Harvard University View Details shinyhunters United States
Ransomware Sasin Colleges & Universities View Details thegentlemen Thailand
Ransomware University of Mannheim View Details qilin Germany
Ransomware Archaeological Institute of America View Details interlock United States
Ransomware Thammasat University View Details thegentlemen Thailand
Ransomware Fgf Colleges & Universities View Details thegentlemen Brazil
Ransomware L'Aeroclub View Details thegentlemen France
Ransomware University of Applied Sciences,Worms View Details qilin Germany
Ransomware Lakeside Union School District View Details rhysida United States
Ransomware Medinah School District 11 View Details qilin United States
Ransomware Odyssey Academy View Details interlock United States
Ransomware EduPro University Group View Details 0apt —
Ransomware all Data View Details tengu —
Ransomware Summit Education Trust View Details 0apt South Africa
Ransomware Ruskin College View Details beast United Kingdom
Ransomware GreenValley Regional College View Details 0apt —
Ransomware shawhillprimaryschool.org.uk View Details incransom United Kingdom
Ransomware Abu Dhabi Indian School – Branch 1, Al Wathba View Details nightspire United Arab Emirates
Ransomware Sukhothai Thammathirat Open University View Details qilin Thailand
Ransomware Jakarta Nanyang School View Details tengu Indonesia
Ransomware VISTA-TRAINING.COM View Details clop United States
Ransomware LTS Group View Details worldleaks Japan
Ransomware St Andrew's CE High School View Details beast United Kingdom
Ransomware Asian Heart Institute View Details sinobi India
Ransomware British School of Brasilia View Details thegentlemen Brazil
Ransomware Office for Students View Details sinobi United Kingdom
Ransomware University Volkswagen Mazda View Details qilin United States
Ransomware Samson Equipment View Details tengu United States
Ransomware Richard Alibon Primary School View Details beast United Kingdom
Ransomware San Silvestre School View Details qilin Peru
Ransomware Federal University of Sergipe View Details vect Brazil
Ransomware Spring Grove Area School District View Details qilin United States
Ransomware Westlake Christian Academy View Details interlock United States
Ransomware www.sje.vic.edu.au View Details lynx Australia
Ransomware Borough of Moonachie View Details incransom United States
Ransomware Ellison Educational Equipment View Details qilin United States
Ransomware INHA University View Details gunra Korea, Republic of
Ransomware Goodwin College View Details qilin United States
Ransomware lfval.net View Details lockbit5 France
Ransomware Madera County Superintendent of Schools View Details qilin United States
Ransomware WSI View Details incransom France
Ransomware Ellison Educational Equipment, Inc View Details worldleaks United States
Ransomware Eastern Townships School Board View Details qilin Canada
Ransomware pellcityschools.net View Details safepay United States
Ransomware Eanes ISD schools View Details qilin United States
Ransomware uniplaclages.edu.br View Details lockbit5 Brazil
Ransomware keystoliteracy.com View Details lockbit5 United States
Ransomware SPZC View Details nova Portugal
Ransomware Clarksville ISD View Details interlock United States
Ransomware aspenviewacademy.org View Details safepay United States
Ransomware Melland High View Details kairos United States
Ransomware The Wardlaw-Hartridge School View Details worldleaks United States
Ransomware Summitcollege View Details kairos United States
Ransomware 51talk.com View Details lockbit5 Philippines
Ransomware bennett.edu View Details incransom United States
Ransomware Providence Academy View Details interlock —
Ransomware University Loft View Details play United States
Ransomware Universidade Municipal de São Caetano View Details medusa Brazil
Ransomware Concord Academy View Details medusa United States
Ransomware vviewisd.net View Details incransom United States
Ransomware St Stephens International View Details thegentlemen United Kingdom
Ransomware The American School Foundation View Details qilin Mexico
Ransomware ITL Systemhaus View Details incransom Germany
Ransomware Kids & Company View Details sinobi Canada
Ransomware Lake Superior State University View Details qilin United States
Ransomware New England Tractor Trailer Training School View Details qilin United States
Ransomware Rochester Philharmonic Orchestra View Details akira United States
Ransomware National Institute of Materials Physics View Details nova Romania
Ransomware Wachusett School District MA View Details rhysida United States
Ransomware WELLBIZBRANDS.COM View Details clop United States
Ransomware PHOENIX.EDU View Details clop United States
Ransomware GARLANDISDSCHOOLS.NET View Details clop United States
Ransomware LIFEFITNESS.COM View Details clop United States
Ransomware baisyaakov.ca View Details incransom Canada
Ransomware ripleyacademy.org View Details incransom United Kingdom
Ransomware datenlotsen.de View Details incransom Germany
Ransomware University of Gävle View Details nova Sweden
Ransomware killinglyschools.org View Details safepay United States
Ransomware doversd.org View Details safepay United States
Ransomware Community Unit School District 201 View Details incransom United States
Ransomware Clackamas Community College View Details medusa United States
Ransomware St Stephen's International View Details thegentlemen Thailand
Ransomware Bishop Ireton High School View Details interlock United States
Ransomware Center for Neuropsychology Learning and Development View Details qilin United States
Ransomware Bellflower Unified School District View Details rhysida United States
Ransomware www.francetravail.fr View Details stormous France
Ransomware WITS.AC.ZA View Details clop South Africa
Ransomware WITS.AC.ZA View Details clop South Africa
Ransomware HARVARD.EDU View Details clop United States

Explore other industry sectors

Other 7080 Communication / Marketing 5018 Services 2750 Finance / Legal / Insurance 2441 Manufacturing / Engineering 1942 Healthcare / Pharma 1707 Public Sector 1592 IT 1400 Construction / Real Estate 1177 Energy 715 Retail / E-commerce 709 Transportation / Travel / Logistics 593 All sectors →