Education Ransomware Victims & Data Breaches
Dark Eye is tracking 1064 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1064Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Education
Top countries for Education attacks
Education Victims Page 2 / 11
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | www.campbell.edu View Details | incransom | United States | ||
| Ransomware | Win Academy View Details | thegentlemen | India | ||
| Ransomware | CCCKeito.edu.hk View Details | krybit | Hong Kong | ||
| Ransomware | UNIV LILLE View Details | lapsus$ | France | ||
| Ransomware | lkc.ac.bw View Details | krybit | Botswana | ||
| Ransomware | Community College of Beaver County View Details | interlock | United States | ||
| Ransomware | fhw-neukoelln.de View Details | dragonforce | Germany | ||
| Ransomware | Alamo Heights School District View Details | worldleaks | United States | ||
| Ransomware | Notre-Dame du Grandchamp View Details | nightspire | France | ||
| Ransomware | Catalyst Learning Company View Details | genesis | United States | ||
| Ransomware | San Felipe Del Rio CISD School View Details | worldleaks | United States | ||
| Ransomware | giunti.it View Details | lockbit5 | Italy | ||
| Ransomware | webster-schools.org View Details | lockbit5 | United States | ||
| Ransomware | alcornschools.org View Details | lockbit5 | United States | ||
| Ransomware | senai.br View Details | lockbit5 | Brazil | ||
| Ransomware | IBB Institut für Bildung und Beratung View Details | qilin | Germany | ||
| Ransomware | Monmouth University View Details | pear | United States | ||
| Ransomware | jenningsk12.org View Details | incransom | United States | ||
| Ransomware | Marion Military Institute View Details | worldleaks | United States | ||
| Ransomware | Infinite Campus, Inc. View Details | shinyhunters | United States | ||
| Ransomware | Amerinational Management Services (AMS) View Details | sinobi | United States | ||
| Ransomware | Cortporation Colina View Details | thegentlemen | Chile | ||
| Ransomware | Payap University View Details | thegentlemen | Thailand | ||
| Ransomware | Private University View Details | pear | United States | ||
| Ransomware | Trinity Catholic High School View Details | beast | United States | ||
| Ransomware | Tamir Hayman View Details | handala | Israel | ||
| Ransomware | Hebrew University of Jerusalem View Details | handala | Israel | ||
| Ransomware | St Fabian Catholic View Details | thegentlemen | United States | ||
| Ransomware | Raz Zimmt (head of the Iran Desk at Israeli security institutes) View Details | handala | Israel | ||
| Ransomware | Stryker Corporation View Details | handala | United States | ||
| Ransomware | Big Brothers Big Sisters View Details | nightspire | United States | ||
| Ransomware | Institute of Social Security - Paraguay View Details | kairos | Paraguay | ||
| Ransomware | Salford City College View Details | qilin | United Kingdom | ||
| Ransomware | Wagon Mound Public Schools View Details | interlock | United States | ||
| Ransomware | salfordcc.ac.uk View Details | dragonforce | United Kingdom | ||
| Ransomware | Israel Institute for National Security Studies (INSS) View Details | handala | Israel | ||
| Ransomware | CHS Villach View Details | thegentlemen | Austria | ||
| Ransomware | denmark.k12.wi.us View Details | incransom | United States | ||
| Ransomware | Adidas View Details | lapsus$ | Germany | ||
| Ransomware | Lille University View Details | lapsus$ | France | ||
| Ransomware | American Beauty School View Details | akira | United States | ||
| Ransomware | Birmingham Museum of Art View Details | termite | United States | ||
| Ransomware | University of Pennsylvania View Details | shinyhunters | United States | ||
| Ransomware | Harvard University View Details | shinyhunters | United States | ||
| Ransomware | Sasin Colleges & Universities View Details | thegentlemen | Thailand | ||
| Ransomware | University of Mannheim View Details | qilin | Germany | ||
| Ransomware | Archaeological Institute of America View Details | interlock | United States | ||
| Ransomware | Thammasat University View Details | thegentlemen | Thailand | ||
| Ransomware | Fgf Colleges & Universities View Details | thegentlemen | Brazil | ||
| Ransomware | L'Aeroclub View Details | thegentlemen | France | ||
| Ransomware | University of Applied Sciences,Worms View Details | qilin | Germany | ||
| Ransomware | Lakeside Union School District View Details | rhysida | United States | ||
| Ransomware | Medinah School District 11 View Details | qilin | United States | ||
| Ransomware | Odyssey Academy View Details | interlock | United States | ||
| Ransomware | EduPro University Group View Details | 0apt | — | ||
| Ransomware | all Data View Details | tengu | — | ||
| Ransomware | Summit Education Trust View Details | 0apt | South Africa | ||
| Ransomware | Ruskin College View Details | beast | United Kingdom | ||
| Ransomware | GreenValley Regional College View Details | 0apt | — | ||
| Ransomware | shawhillprimaryschool.org.uk View Details | incransom | United Kingdom | ||
| Ransomware | Abu Dhabi Indian School – Branch 1, Al Wathba View Details | nightspire | United Arab Emirates | ||
| Ransomware | Sukhothai Thammathirat Open University View Details | qilin | Thailand | ||
| Ransomware | Jakarta Nanyang School View Details | tengu | Indonesia | ||
| Ransomware | VISTA-TRAINING.COM View Details | clop | United States | ||
| Ransomware | LTS Group View Details | worldleaks | Japan | ||
| Ransomware | St Andrew's CE High School View Details | beast | United Kingdom | ||
| Ransomware | Asian Heart Institute View Details | sinobi | India | ||
| Ransomware | British School of Brasilia View Details | thegentlemen | Brazil | ||
| Ransomware | Office for Students View Details | sinobi | United Kingdom | ||
| Ransomware | University Volkswagen Mazda View Details | qilin | United States | ||
| Ransomware | Samson Equipment View Details | tengu | United States | ||
| Ransomware | Richard Alibon Primary School View Details | beast | United Kingdom | ||
| Ransomware | San Silvestre School View Details | qilin | Peru | ||
| Ransomware | Federal University of Sergipe View Details | vect | Brazil | ||
| Ransomware | Spring Grove Area School District View Details | qilin | United States | ||
| Ransomware | Westlake Christian Academy View Details | interlock | United States | ||
| Ransomware | www.sje.vic.edu.au View Details | lynx | Australia | ||
| Ransomware | Borough of Moonachie View Details | incransom | United States | ||
| Ransomware | Ellison Educational Equipment View Details | qilin | United States | ||
| Ransomware | INHA University View Details | gunra | Korea, Republic of | ||
| Ransomware | Goodwin College View Details | qilin | United States | ||
| Ransomware | lfval.net View Details | lockbit5 | France | ||
| Ransomware | Madera County Superintendent of Schools View Details | qilin | United States | ||
| Ransomware | WSI View Details | incransom | France | ||
| Ransomware | Ellison Educational Equipment, Inc View Details | worldleaks | United States | ||
| Ransomware | Eastern Townships School Board View Details | qilin | Canada | ||
| Ransomware | pellcityschools.net View Details | safepay | United States | ||
| Ransomware | Eanes ISD schools View Details | qilin | United States | ||
| Ransomware | uniplaclages.edu.br View Details | lockbit5 | Brazil | ||
| Ransomware | keystoliteracy.com View Details | lockbit5 | United States | ||
| Ransomware | SPZC View Details | nova | Portugal | ||
| Ransomware | Clarksville ISD View Details | interlock | United States | ||
| Ransomware | aspenviewacademy.org View Details | safepay | United States | ||
| Ransomware | Melland High View Details | kairos | United States | ||
| Ransomware | The Wardlaw-Hartridge School View Details | worldleaks | United States | ||
| Ransomware | Summitcollege View Details | kairos | United States | ||
| Ransomware | 51talk.com View Details | lockbit5 | Philippines | ||
| Ransomware | bennett.edu View Details | incransom | United States | ||
| Ransomware | Providence Academy View Details | interlock | — | ||
| Ransomware | University Loft View Details | play | United States |