Education Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1119Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Education
Top countries for Education attacks
Education Victims Page 5 / 12
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | St Edmund's College View Details | qilin | United Kingdom | ||
| Ransomware | Cherokee County School District View Details | interlock | United States | ||
| Ransomware | AKTO View Details | nitrogen | United States | ||
| Ransomware | Élan Sportif Nantes View Details | ralord | France | ||
| Ransomware | swr.school View Details | safepay | Germany | ||
| Ransomware | Forrest City School District View Details | rhysida | United States | ||
| Ransomware | ec-nantes.fr View Details | ralord | France | ||
| Ransomware | saiedu.fi View Details | safepay | Finland | ||
| Ransomware | Okeene Elementary School View Details | rhysida | United States | ||
| Ransomware | Aztec Municipal School District View Details | interlock | United States | ||
| Ransomware | Aztec Municipal School District View Details | interlock | United States | ||
| Ransomware | Big Horn County School District #4 View Details | medusa | United States | ||
| Ransomware | Baltimorecityschools View Details | cloak | United States | ||
| Ransomware | Newtown Friends School (newtownfriends.org) View Details | fog | United States | ||
| Ransomware | warmsworth.doncaster.sch.uk View Details | incransom | United Kingdom | ||
| Ransomware | nrru.ac.th - University View Details | babuk2 | Thailand | ||
| Ransomware | web.asia.edu.tw - Taiwan (Asia University) View Details | babuk2 | Taiwan, Province of China | ||
| Ransomware | web.asia.edu.tw - Taiwan (Asia University) View Details | babuk2 | Taiwan, Province of China | ||
| Ransomware | El Camino Real Academy (elcaminorealacademy) View Details | fog | United States | ||
| Ransomware | CAHOKIA CUSD 187 SCHOOL DISTRICT View Details | qilin | United States | ||
| Ransomware | tradingacademy.com View Details | safepay | United States | ||
| Ransomware | Urgent Warning to University of Rennes – Negotiate Now! View Details | funksec | France | ||
| Ransomware | France Universités View Details | funksec | France | ||
| Ransomware | Asia University Hospital View Details | crazyhunter | Taiwan, Province of China | ||
| Ransomware | Asia University View Details | crazyhunter | Taiwan, Province of China | ||
| Ransomware | univ-rennes.fr View Details | funksec | France | ||
| Ransomware | Hancock Public School View Details | interlock | United States | ||
| Ransomware | Hancock Public School View Details | interlock | United States | ||
| Ransomware | sorbonne-universite.fr View Details | funksec | France | ||
| Ransomware | www.portlandschools.org View Details | ransomhub | United States | ||
| Ransomware | WJCC Public Schools (wjccschools.org) View Details | fog | United States | ||
| Ransomware | EXCELLED.COM View Details | clop | United States | ||
| Ransomware | PITSCO.COM View Details | clop | United States | ||
| Ransomware | KWIKGOAL.COM View Details | clop | United States | ||
| Ransomware | Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography View Details | ddosecret | Russian Federation | ||
| Ransomware | Dept of Education of the Strezhevoy City District Administration View Details | ddosecret | — | ||
| Ransomware | Andrew Tate's The Real World (Hustler's University) View Details | ddosecret | — | ||
| Ransomware | Laurens School District 56 View Details | medusa | United States | ||
| Ransomware | www.wpisd.com View Details | ransomhub | United States | ||
| Ransomware | Novi Community School District View Details | killsec | United States | ||
| Ransomware | www.riverdale.edu View Details | ransomhub | United States | ||
| Ransomware | ehdd.com View Details | incransom | United States | ||
| Ransomware | Hochschule View Details | fog | Germany | ||
| Ransomware | danecourt.kent.sch.uk View Details | kairos | United Kingdom | ||
| Ransomware | Greencastle-Antrim Senior High School (gcasd.org) View Details | fog | United States | ||
| Ransomware | Bethany Lutheran Church View Details | qilin | United States | ||
| Ransomware | stjerome.org View Details | safepay | United States | ||
| Ransomware | CESI View Details | termite | France | ||
| Ransomware | Saint George's College (saintgeorge.cl) View Details | fog | Chile | ||
| Ransomware | Aurora Public Schools (aurorak12.org) View Details | fog | United States | ||
| Ransomware | The University of Notre Dame Australia (nd.edu.au) View Details | fog | Australia | ||
| Ransomware | cps.k12.il.us View Details | clop | United States | ||
| Ransomware | Brockway Hair Design View Details | medusa | United States | ||
| Ransomware | MEDES College View Details | medusa | Canada | ||
| Ransomware | Albright Institute View Details | killsec | Australia | ||
| Ransomware | Hpisd.org View Details | ransomhub | United States | ||
| Ransomware | wwcsd.net View Details | ransomhub | United States | ||
| Ransomware | Substitute Teacher Service View Details | cicada3301 | United States | ||
| Ransomware | rattelacademy.com View Details | funksec | Israel | ||
| Ransomware | topackt.com View Details | lockbit3 | Germany | ||
| Ransomware | usuhs.edu View Details | lockbit3 | United States | ||
| Ransomware | St. Nicholas School View Details | 8base | Brazil | ||
| Ransomware | High Learn Ltd View Details | 8base | United Kingdom | ||
| Ransomware | Pembina Trails School Division View Details | rhysida | Canada | ||
| Ransomware | tnlottery.com View Details | incransom | United States | ||
| Ransomware | Versalys.com View Details | qilin | Canada | ||
| Ransomware | muscogee.k12.ga.us View Details | safepay | United States | ||
| Ransomware | broward.edu View Details | incransom | United States | ||
| Ransomware | lhps.org View Details | incransom | United States | ||
| Ransomware | achieverssciencejournal.org View Details | funksec | Nigeria | ||
| Ransomware | paradiseschools.org View Details | safepay | United States | ||
| Ransomware | De La Salle High School (dlshs.org) View Details | fog | United States | ||
| Ransomware | CPS.EDU View Details | clop | United States | ||
| Ransomware | Chappell Schools View Details | medusa | United States | ||
| Ransomware | Black Hills Regional Eye Institute View Details | qilin | United States | ||
| Ransomware | theurswickschool.co.uk View Details | kairos | United Kingdom | ||
| Ransomware | gonzalesusd.net View Details | safepay | United States | ||
| Ransomware | Kilgore College (kilgore.edu) View Details | incransom | United States | ||
| Ransomware | anwsd.org View Details | threeam | United States | ||
| Ransomware | The University of Oklahoma (ou.edu) View Details | fog | United States | ||
| Ransomware | Wynnewood High School View Details | 8base | United States | ||
| Ransomware | mi.edu View Details | ransomhub | United States | ||
| Ransomware | wissenhive.com View Details | funksec | India | ||
| Ransomware | Lake Shore Public Schools View Details | 8base | United States | ||
| Ransomware | byronunionschooldistrict.us View Details | safepay | United States | ||
| Ransomware | Watertown Public Schools View Details | raworld | United States | ||
| Ransomware | Albion College View Details | medusa | United States | ||
| Ransomware | Village Community School (vcsnyc.org) View Details | fog | United States | ||
| Ransomware | Broker Educational Sales & Training View Details | medusa | United States | ||
| Ransomware | Howell Township Public Schools (howell.k12.nj.us) View Details | fog | United States | ||
| Ransomware | Hide-A-Way Lake Club View Details | akira | United States | ||
| Ransomware | Nathan American Academy View Details | funksec | Taiwan, Province of China | ||
| Ransomware | rtdc.gov.mn View Details | funksec | Mongolia | ||
| Ransomware | Waverley Christian College (wcc.vic.edu.au) View Details | fog | Australia | ||
| Ransomware | arkajainuniver View Details | funksec | India | ||
| Ransomware | londonsmt.org View Details | dragonransomware | United Kingdom | ||
| Ransomware | w3webschools.com View Details | dragonransomware | India | ||
| Ransomware | inda.edu.uy View Details | dragonransomware | Uruguay | ||
| Ransomware | oakenglish.com View Details | dragonransomware | China | ||
| Ransomware | eye-ed.com View Details | dragonransomware | United States |