Education Ransomware Victims & Data Breaches
DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.
Dark Eye is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 1119Victims tracked
- 8Threat groups
- 8Countries
- September 2026Latest activity
Most active ransomware groups targeting Education
Top countries for Education attacks
Education Victims Page 6 / 12
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Wintergreen Learning Materials View Details | hunters | Canada | ||
| Ransomware | Rutherford County Schools View Details | rhysida | United States | ||
| Ransomware | FunkLocker View Details | funksec | United States | ||
| Ransomware | edizionidottrinari View Details | funksec | Italy | ||
| Ransomware | www.d47.org View Details | ransomhub | United States | ||
| Ransomware | IFA Paris View Details | funksec | France | ||
| Ransomware | www.goethe-university-frankfurt.de View Details | ransomhub | Germany | ||
| Ransomware | Bedminster School (bedminsterschool.org) View Details | fog | United States | ||
| Ransomware | Grandview School District View Details | blacksuit | United States | ||
| Ransomware | Vermilion Parish School System View Details | rhysida | United States | ||
| Ransomware | glts.net View Details | abyss | United States | ||
| Ransomware | isd109.org View Details | ransomhub | United States | ||
| Ransomware | maynard.k12.ma.us View Details | ransomhub | United States | ||
| Ransomware | inthinking.net View Details | darkvault | Korea, Republic of | ||
| Ransomware | BusinessTraining.be View Details | safepay | Belgium | ||
| Ransomware | Richmond Hill Primary Academy View Details | safepay | United Kingdom | ||
| Ransomware | Burkburnett Independent School District View Details | fog | United States | ||
| Ransomware | Istituto di Istruzione Superiore "Giulio Natta" View Details | ElDorado | Italy | ||
| Ransomware | Think Simple View Details | ElDorado | United States | ||
| Ransomware | Conseil scolaire Viamonde View Details | termite | Canada | ||
| Ransomware | UATF View Details | stormous | Bolivia, Plurinational State of | ||
| Ransomware | uatf.edu.bo View Details | stormous | Bolivia, Plurinational State of | ||
| Ransomware | edwardsburgschoolsfoundation.org View Details | chort | United States | ||
| Ransomware | marysville.k12.oh.us View Details | blacksuit | United States | ||
| Ransomware | stalyhill-inf.tameside.sch.uk View Details | blacksuit | United Kingdom | ||
| Ransomware | www.guymontigers.com View Details | ransomhub | Australia | ||
| Ransomware | National Institute of Administration View Details | killsec | Romania | ||
| Ransomware | Granite School District View Details | rhysida | United States | ||
| Ransomware | Winnebago Public School Foundation View Details | interlock | United States | ||
| Ransomware | Winnebago Public School Foundation View Details | interlock | United States | ||
| Ransomware | www.msdl.ca View Details | ransomhub | Canada | ||
| Ransomware | Lincoln University View Details | meow | United States | ||
| Ransomware | Webb Institute View Details | incransom | United States | ||
| Ransomware | Fylde Coast Academy Trust View Details | rhysida | United Kingdom | ||
| Ransomware | College of Business - Tanzania View Details | hellcat | Tanzania, United Republic of | ||
| Ransomware | Ministry of Education - Jordan View Details | hellcat | Jordan | ||
| Ransomware | International University of Sarajevo View Details | medusa | Bosnia and Herzegovina | ||
| Ransomware | eap.gr View Details | ransomhub | Greece | ||
| Ransomware | lsst.ac View Details | cactus | United Kingdom | ||
| Ransomware | tlie.org View Details | ransomhub | United States | ||
| Ransomware | Spirit Lake Community School District View Details | medusa | United States | ||
| Ransomware | Jordan Public Schools (https://www.jordan.k12.mn.us/) View Details | fog | United States | ||
| Ransomware | Mastery Schools View Details | dragonforce | United States | ||
| Ransomware | guymontigers.com View Details | ransomhub | Canada | ||
| Ransomware | Texas Tech University Health Sciences Center View Details | interlock | United States | ||
| Ransomware | Evergreen Local School District (evgvikings.org) View Details | fog | United States | ||
| Ransomware | omara-ag.com View Details | blacksuit | Germany | ||
| Ransomware | appen.com View Details | apt73 | Australia | ||
| Ransomware | Goshen Central School District (gcsny.org) View Details | fog | United States | ||
| Ransomware | Lincoln University (lincolnu.edu) View Details | fog | United States | ||
| Ransomware | rcschools.net View Details | blacksuit | United States | ||
| Ransomware | www.chiltonisd.org View Details | ransomhub | United States | ||
| Ransomware | Henry County Schools View Details | rhysida | United States | ||
| Ransomware | Inner City Education Foundation View Details | medusa | United States | ||
| Ransomware | extramarks.com View Details | killsec | India | ||
| Ransomware | oklahomasleepinstitute.com View Details | threeam | United States | ||
| Ransomware | Universite Paris Sud View Details | ransomhouse | France | ||
| Ransomware | Albany College of Pharmacy View Details | medusa | United States | ||
| Ransomware | winwinza.com View Details | ransomhub | Myanmar | ||
| Ransomware | bbgc.gov.bd View Details | killsec | Bangladesh | ||
| Ransomware | sacredheart.southwark.sch.uk View Details | threeam | United Kingdom | ||
| Ransomware | gsdwi.org View Details | ransomhub | Germany | ||
| Ransomware | Providence Public School Department View Details | medusa | United States | ||
| Ransomware | capecodacademy.org View Details | ransomhub | United States | ||
| Ransomware | EAGLE School View Details | qilin | United States | ||
| Ransomware | Charles Darwin School View Details | blacksuit | United Kingdom | ||
| Ransomware | Qeco/coeq View Details | rhysida | United States | ||
| Ransomware | Pennsylvania State Education Association View Details | rhysida | United States | ||
| Ransomware | Stratford School Academy View Details | rhysida | United Kingdom | ||
| Ransomware | briedis.lt View Details | ransomhub | Lithuania | ||
| Ransomware | cps-k12.org View Details | ransomhub | United States | ||
| Ransomware | www.mineduc.gob.gt View Details | ransomhub | Guatemala | ||
| Ransomware | tdsb.on.ca View Details | lockbit3 | Canada | ||
| Ransomware | Academy of Model Aeronautics View Details | blacksuit | United States | ||
| Ransomware | The University and College Union View Details | incransom | United Kingdom | ||
| Ransomware | schoolrush.com View Details | killsec | United States | ||
| Ransomware | Life University View Details | metaencryptor | United States | ||
| Ransomware | ccsdschools.com View Details | ransomhub | United States | ||
| Ransomware | www.martinswood.herts.sch.uk View Details | ransomhub | United Kingdom | ||
| Ransomware | ccj.edu.lb View Details | qilin | Lebanon | ||
| Ransomware | Y*********I View Details | flocker | United States | ||
| Ransomware | brockington.leisc.sch.uk View Details | lockbit3 | United Kingdom | ||
| Ransomware | fremontschools.net View Details | lockbit3 | United States | ||
| Ransomware | Maryville Academy View Details | rhysida | United States | ||
| Ransomware | Ranney School View Details | rhysida | United States | ||
| Ransomware | effinghamschools.com View Details | ransomhub | United States | ||
| Ransomware | Camp Susque View Details | medusa | United States | ||
| Ransomware | St. Thomas Aquinas High School View Details | medusa | United States | ||
| Ransomware | www.chsd117.org View Details | blacksuit | United States | ||
| Ransomware | New Jersey City University View Details | rhysida | United States | ||
| Ransomware | www.neurologicalinstitute.com View Details | ransomhub | United States | ||
| Ransomware | Texas Tech University View Details | meow | United States | ||
| Ransomware | Odessa College View Details | fog | United States | ||
| Ransomware | e21c.co.uk View Details | lockbit3 | United Kingdom | ||
| Ransomware | Wichita State University Campus of Applied Sciences and Technology View Details | fog | — | ||
| Ransomware | norton.k12.ma.us View Details | lockbit3 | United States | ||
| Ransomware | troyareasd.org View Details | lockbit3 | Armenia | ||
| Ransomware | joliet86.org View Details | lockbit3 | United States | ||
| Ransomware | ZSZAALEJI.cz View Details | qilin | Czechia | ||
| Ransomware | Geelong Lutheran College View Details | fog | — |