How many Education organizations have been hit by ransomware?

Dark Eye is currently tracking 1119 Education organizations listed by ransomware and data-extortion groups.

Which ransomware groups target the Education sector?

The most active threat actors against Education organizations include lockbit3, qilin, incransom, among others tracked on Dark Eye.

Which countries' Education organizations are most affected?

Education victims are concentrated in United States, United Kingdom, France, based on the listings indexed by Dark Eye.

Education Ransomware Victims & Data Breaches

DARK EYE ALERTS

Get an alert whenever a new Education organisation is listed

Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

1119Victims tracked
8Threat groups
8Countries
September 2026Latest activity

Education Victims Page 8 / 12

Type	Target	Source	Discovered	Country
Ransomware	Blaine County Schools View Details	blacksuit	25/12/2023	United States
Ransomware	Ono Academic College View Details	malekteam	24/12/2023	—
Ransomware	denford.co.uk View Details	lockbit3	22/12/2023	United Kingdom
Ransomware	rmutto.ac.th View Details	stormous	21/12/2023	Thailand
Ransomware	The International School of Management View Details	8base	20/12/2023	Germany
Ransomware	mtsd-vt.org View Details	lockbit3	19/12/2023	—
Ransomware	New York School of Interior Design View Details	incransom	16/12/2023	—
Ransomware	Baden View Details	dragonforce	13/12/2023	Switzerland
Ransomware	Tulane University View Details	meow	13/12/2023	—
Ransomware	Hinsdale School District View Details	medusa	11/12/2023	United States
Ransomware	The Glendale Unified School District View Details	medusa	11/12/2023	United States
Ransomware	Technical University of Mombasa View Details	siegedsec	09/12/2023	Kenya
Ransomware	usherbrooke.ca View Details	lockbit3	07/12/2023	Canada
Ransomware	Campbell County Schools View Details	medusa	06/12/2023	—
Ransomware	Henry County Schools View Details	blacksuit	05/12/2023	United States
Ransomware	Full access to the school network USA View Details	everest	04/12/2023	—
Ransomware	ychlccsc.edu.hk View Details	lockbit3	04/12/2023	Hong Kong
Ransomware	Nida Corp View Details	noescape	04/12/2023	—
Ransomware	bboed.org View Details	lockbit3	02/12/2023	—
Ransomware	Dörr Group View Details	alphv	02/12/2023	Germany
Ransomware	DePauw University View Details	blacksuit	30/11/2023	India
Ransomware	Science History Institute View Details	noescape	30/11/2023	—
Ransomware	New River Community Technical College View Details	blacksuit	29/11/2023	United States
Ransomware	Great Valley School District View Details	medusa	29/11/2023	—
Ransomware	hi-schoolpharmacy.com View Details	lockbit3	28/11/2023	—
Ransomware	Bangkok University View Details	rhysida	27/11/2023	Thailand
Ransomware	NC Central University View Details	rhysida	27/11/2023	—
Ransomware	New River Community & Technical College View Details	blacksuit	27/11/2023	United States
Ransomware	TXWES.EDU View Details	clop	25/11/2023	United States
Ransomware	St Edmund's College & Prep School View Details	rhysida	21/11/2023	—
Ransomware	Select Education Group View Details	blacksuit	17/11/2023	United States
Ransomware	Decatur Independent School District View Details	incransom	17/11/2023	—
Ransomware	thewalkerschool View Details	alphv	16/11/2023	—
Ransomware	aegean.gr View Details	lockbit3	12/11/2023	Greece
Ransomware	thewalkerschool.org View Details	lockbit3	12/11/2023	—
Ransomware	foley.k12.mn.us View Details	lockbit3	08/11/2023	—
Ransomware	Hopewell Area School District View Details	medusa	07/11/2023	—
Ransomware	jewell.edu View Details	lockbit3	03/11/2023	United States
Ransomware	microtrain.net View Details	lockbit3	03/11/2023	—
Ransomware	lafase.cl View Details	lockbit3	02/11/2023	France
Ransomware	GO! Handelsschool Aalst View Details	rhysida	02/11/2023	Belgium
Ransomware	riohondo.edu View Details	lockbit3	31/10/2023	United States
Ransomware	Stanford University View Details	akira	27/10/2023	—
Ransomware	Ancillae-Assumpta Academy View Details	snatch	25/10/2023	—
Ransomware	University of Defence - Full Leak View Details	monti	23/10/2023	—
Ransomware	Central University of Bayamón View Details	noescape	23/10/2023	Puerto Rico
Ransomware	International Community Schools View Details	noescape	23/10/2023	—
Ransomware	Ada-Borup-West School View Details	medusalocker	23/10/2023	—
Ransomware	UK Stratton Primary School View Details	hunters	20/10/2023	United Kingdom
Ransomware	Royal College of Physicians and Surgeonsof Glasgow View Details	akira	20/10/2023	United Kingdom
Ransomware	Rotorcraft Leasing Company View Details	0mega	17/10/2023	—
Ransomware	Boise Rescue Mission Ministries View Details	alphv	16/10/2023	—
Ransomware	Islamic Azad University Electronic Campus View Details	arvinclub	15/10/2023	Iran, Islamic Republic of
Ransomware	Cleveland City Schools View Details	incransom	13/10/2023	United States
Ransomware	Alliance Virgil Roberts Leadership Academy View Details	snatch	10/10/2023	—
Ransomware	Southern Arkansas University View Details	rhysida	09/10/2023	—
Ransomware	Islamic Azad University of Shiraz View Details	arvinclub	08/10/2023	Iran, Islamic Republic of
Ransomware	University Obrany - Part 2 (Tiny Leak) View Details	monti	07/10/2023	—
Ransomware	Learning Partnership West - Leaked View Details	ragnarlocker	05/10/2023	United Kingdom
Ransomware	University of Defence - Part 1 View Details	monti	03/10/2023	Czechia
Ransomware	Hochschule Furtwangen University View Details	alphv	28/09/2023	Germany
Ransomware	Lutheran Church and Preschool View Details	bianlian	26/09/2023	—
Ransomware	Merced City School District View Details	losttrust	26/09/2023	—
Ransomware	Morgan School District View Details	losttrust	26/09/2023	—
Ransomware	Jersey College View Details	losttrust	26/09/2023	United States
Ransomware	Immanuel Christian School View Details	losttrust	26/09/2023	—
Ransomware	Marlboro Township Public School View Details	losttrust	26/09/2023	United States
Ransomware	Ort Harmelin College of Engineering View Details	rhysida	23/09/2023	—
Ransomware	University Obrany - Press Release View Details	monti	19/09/2023	—
Ransomware	American University of Antigua View Details	alphv	19/09/2023	Antigua and Barbuda
Ransomware	faithfamilyacademy.org View Details	lockbit3	16/09/2023	—
Ransomware	Polanglo View Details	cryptbb	15/09/2023	Poland
Ransomware	Danbury Public Schools View Details	cryptbb	15/09/2023	United States
Ransomware	ToyotaLift Northeast View Details	cryptbb	15/09/2023	—
Ransomware	hillsboroughschools.org View Details	lockbit3	15/09/2023	United States
Ransomware	EDUCAL, SA de CV View Details	noescape	14/09/2023	Mexico
Ransomware	IT-Center Syd View Details	rhysida	09/09/2023	Denmark
Ransomware	Chambersburg Area School District View Details	blackbyte	07/09/2023	—
Ransomware	Taylor University View Details	moneymessage	03/09/2023	—
Ransomware	aquinas.qld.edu.au View Details	lockbit3	01/09/2023	Australia
Ransomware	antioch.edu View Details	lockbit3	31/08/2023	United States
Ransomware	greensboro.edu View Details	lockbit3	30/08/2023	United States
Ransomware	Renton School District View Details	akira	30/08/2023	—
Ransomware	Ningbo Yinzhou Vocational High School View Details	noescape	30/08/2023	—
Ransomware	uprepschool.org View Details	lockbit3	29/08/2023	—
Ransomware	greenside-sch.org View Details	lockbit3	29/08/2023	—
Ransomware	Jasper High School View Details	akira	28/08/2023	—
Ransomware	LEN Italia View Details	medusa	25/08/2023	—
Ransomware	Edmonds School District View Details	akira	24/08/2023	United States
Ransomware	Hoosick Falls Central School District View Details	8base	24/08/2023	—
Ransomware	decrolyamericano.edu.gt View Details	lockbit3	22/08/2023	Guatemala
Ransomware	Pierce College View Details	rhysida	21/08/2023	United States
Ransomware	Camino Nuevo CharterAcademy View Details	akira	17/08/2023	—
Ransomware	Smart-swgcrc.org View Details	lockbit3	17/08/2023	United States
Ransomware	The Clifton Public Schools View Details	akira	17/08/2023	—
Ransomware	CVO Antwerpen View Details	metaencryptor	16/08/2023	Belgium
Ransomware	ToyotaLift Northeast View Details	8base	16/08/2023	—
Ransomware	Fondation De Verdeil View Details	noescape	15/08/2023	Switzerland
Ransomware	Saint Xavier University View Details	alphv	14/08/2023	United States
Ransomware	stmarysschool.co.za View Details	lockbit3	13/08/2023	South Africa

Other 7214 Communication / Marketing 5001 Services 2892 Finance / Legal / Insurance 2672 Manufacturing / Engineering 2355 Healthcare / Pharma 2009 IT 1854 Public Sector 1646 Construction / Real Estate 1326 Retail / E-commerce 901 Transportation / Travel / Logistics 808 Energy 749 All sectors →

Education Ransomware Victims & Data Breaches

Most active ransomware groups targeting Education

Top countries for Education attacks

Education Victims Page 8 / 12

Explore other industry sectors

Restricted Access

Now you can see the leak, not just the listing