Education Ransomware Victims & Data Breaches

DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

lockbit3 92 qilin 73 incransom 57 vicesociety 52 interlock 48 rhysida 44 medusa 40 pysa 40

Top countries for Education attacks

United States 457 United Kingdom 67 France 32 Germany 30 Canada 30 Australia 22 India 17 Brazil 17

Education Victims Page 3 / 12

Type Target Source Discovered Country Intel Link
Ransomware GreenValley Regional College View Details 0apt —
Ransomware shawhillprimaryschool.org.uk View Details incransom United Kingdom
Ransomware Abu Dhabi Indian School – Branch 1, Al Wathba View Details nightspire United Arab Emirates
Ransomware Sukhothai Thammathirat Open University View Details qilin Thailand
Ransomware Jakarta Nanyang School View Details tengu Indonesia
Ransomware VISTA-TRAINING.COM View Details clop United States
Ransomware LTS Group View Details worldleaks Japan
Ransomware St Andrew's CE High School View Details beast United Kingdom
Ransomware Asian Heart Institute View Details sinobi India
Ransomware British School of Brasilia View Details thegentlemen Brazil
Ransomware Office for Students View Details sinobi United Kingdom
Ransomware University Volkswagen Mazda View Details qilin United States
Ransomware Samson Equipment View Details tengu United States
Ransomware Richard Alibon Primary School View Details beast United Kingdom
Ransomware San Silvestre School View Details qilin Peru
Ransomware Federal University of Sergipe View Details vect Brazil
Ransomware Spring Grove Area School District View Details qilin United States
Ransomware Westlake Christian Academy View Details interlock United States
Ransomware Westlake Christian Academy View Details interlock United States
Ransomware www.sje.vic.edu.au View Details lynx Australia
Ransomware Borough of Moonachie View Details incransom United States
Ransomware Ellison Educational Equipment View Details qilin United States
Ransomware INHA University View Details gunra Korea, Republic of
Ransomware Goodwin College View Details qilin United States
Ransomware lfval.net View Details lockbit5 France
Ransomware Madera County Superintendent of Schools View Details qilin United States
Ransomware WSI View Details incransom France
Ransomware Ellison Educational Equipment, Inc View Details worldleaks United States
Ransomware Eastern Townships School Board View Details qilin Canada
Ransomware pellcityschools.net View Details safepay United States
Ransomware Eanes ISD schools View Details qilin United States
Ransomware uniplaclages.edu.br View Details lockbit5 Brazil
Ransomware keystoliteracy.com View Details lockbit5 United States
Ransomware SPZC View Details nova Portugal
Ransomware Clarksville ISD View Details interlock United States
Ransomware Clarksville ISD View Details interlock United States
Ransomware aspenviewacademy.org View Details safepay United States
Ransomware Melland High View Details kairos United States
Ransomware The Wardlaw-Hartridge School View Details worldleaks United States
Ransomware Summitcollege View Details kairos United States
Ransomware 51talk.com View Details lockbit5 Philippines
Ransomware bennett.edu View Details incransom United States
Ransomware Providence Academy View Details interlock —
Ransomware Providence Academy View Details interlock France
Ransomware University Loft View Details play United States
Ransomware Universidade Municipal de São Caetano View Details medusa Brazil
Ransomware Concord Academy View Details medusa United States
Ransomware vviewisd.net View Details incransom United States
Ransomware St Stephens International View Details thegentlemen United Kingdom
Ransomware The American School Foundation View Details qilin Mexico
Ransomware ITL Systemhaus View Details incransom Germany
Ransomware Kids & Company View Details sinobi Canada
Ransomware Lake Superior State University View Details qilin United States
Ransomware New England Tractor Trailer Training School View Details qilin United States
Ransomware Rochester Philharmonic Orchestra View Details akira United States
Ransomware National Institute of Materials Physics View Details nova Romania
Ransomware Wachusett School District MA View Details rhysida United States
Ransomware WELLBIZBRANDS.COM View Details clop United States
Ransomware PHOENIX.EDU View Details clop United States
Ransomware GARLANDISDSCHOOLS.NET View Details clop United States
Ransomware LIFEFITNESS.COM View Details clop United States
Ransomware baisyaakov.ca View Details incransom Canada
Ransomware ripleyacademy.org View Details incransom United Kingdom
Ransomware datenlotsen.de View Details incransom Germany
Ransomware University of Gävle View Details nova Sweden
Ransomware killinglyschools.org View Details safepay United States
Ransomware doversd.org View Details safepay United States
Ransomware Community Unit School District 201 View Details incransom United States
Ransomware Clackamas Community College View Details medusa United States
Ransomware St Stephen's International View Details thegentlemen Thailand
Ransomware Bishop Ireton High School View Details interlock United States
Ransomware Center for Neuropsychology Learning and Development View Details qilin United States
Ransomware Bellflower Unified School District View Details rhysida United States
Ransomware www.francetravail.fr View Details stormous France
Ransomware WITS.AC.ZA View Details clop South Africa
Ransomware HARVARD.EDU View Details clop United States
Ransomware Doha British School View Details qilin Qatar
Ransomware Adichunchanagiri Institute Of Technology View Details kryptos India
Ransomware National Institute of Administratio... View Details killsec Romania
Ransomware SIGN Fracture Care International View Details qilin United States
Ransomware Kearney Public Schools View Details interlock United States
Ransomware Kearney Public Schools View Details interlock United States
Ransomware The North Stonington School District View Details interlock United States
Ransomware The North Stonington School District View Details interlock United States
Ransomware ZEF's View Details qilin Finland
Ransomware hautsdefrance.fr View Details qilin France
Ransomware North Stonington Elementary School View Details interlock United States
Ransomware North Stonington Elementary School View Details interlock United States
Ransomware Kido Schools View Details radiant United States
Ransomware EPS FUJ Private School UAE View Details bqtlock United Arab Emirates
Ransomware www.ucisd.net View Details qilin United States
Ransomware Dakota Boys and Girls Ranch View Details sinobi United States
Ransomware Massachusetts Bay Community College View Details qilin United States
Ransomware The Methodist Church of Southern Africa View Details beast South Africa
Ransomware HMH (hmhco.com) View Details shinyhunters United States
Ransomware Immaculate Heart of Mary View Details sinobi United States
Ransomware Rectory School View Details qilin United States
Ransomware Universite de Pau et du Pays de lAdour View Details nova France
Ransomware KIPP DC View Details worldleaks United States
Ransomware Speed Art Museum View Details incransom United States

Explore other industry sectors

Other 7214 Communication / Marketing 5001 Services 2891 Finance / Legal / Insurance 2671 Manufacturing / Engineering 2355 Healthcare / Pharma 2009 IT 1854 Public Sector 1646 Construction / Real Estate 1326 Retail / E-commerce 901 Transportation / Travel / Logistics 808 Energy 749 All sectors →