Education Ransomware Victims & Data Breaches

DARK EYE ALERTS
Get an alert whenever a new Education organisation is listed
Narrow it to specific countries — and pick which feeds to watch — in the next step.

Dark Eye is tracking 1119 organizations in the Education sector named by ransomware and data-extortion groups, with activity recorded as recently as September 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.

Most active ransomware groups targeting Education

Education Victims Page 9 / 12

Type Target Source Discovered Country Intel Link
Ransomware National Institute of Social Services for Retirees and Pensioners View Details rhysida Argentina
Ransomware Boson View Details akira
Ransomware Lower Yukon School District View Details noescape
Ransomware cbcstjohns.co.za View Details lockbit3 South Africa
Ransomware Emerson School District View Details medusa United States
Ransomware pointpleasant.k12.nj.us View Details lockbit3 United States
Ransomware SHERMAN.EDU View Details clop United States
Ransomware westoaksschool.co.uk View Details lockbit3 United Kingdom
Ransomware St Landry Parish School Board View Details medusa
Ransomware ESMOD View Details rhysida
Ransomware Rouzbeh Educational Complex View Details rhysida Iran, Islamic Republic of
Ransomware Morehead State University (MSU) View Details akira
Ransomware SIU.EDU View Details clop United States
Ransomware CAP.ORG View Details clop
Ransomware GEMS Education | gemseducationcom View Details alphv
Ransomware North Carolina A&T State University (wwwncatedu) View Details alphv
Ransomware Florida International University (wwwfiuedu) View Details alphv
Ransomware The University of Pisa View Details alphv Italy
Ransomware Plainedge Public Schools View Details alphv
Ransomware Knoll View Details alphv
Ransomware unipilotoeduco View Details alphv Colombia
Ransomware Warren County Community College View Details alphv United States
Ransomware Koo Wee Rup Secondary College View Details alphv Australia
Ransomware IFPA View Details alphv Brazil
Ransomware Wawasee Community School Corporation View Details alphv India
Ransomware WALSHALBERT View Details alphv
Ransomware e-Hazardcom and ArcWearcom (with data) View Details alphv
Ransomware Academy Mortgage Corporation View Details alphv
Ransomware University of Salerno View Details rhysida Italy
Ransomware University of the West of Scotland View Details rhysida United Kingdom
Ransomware Braintree Public Schools View Details royal United States
Ransomware Lumberton Independent School District View Details rhysida
Ransomware academia21.com View Details lockbit3 Australia
Ransomware Stephen F. Austin State University View Details rhysida United States
Ransomware ICT-College View Details rhysida
Ransomware Meteksan Defence Industry View Details moneymessage
Ransomware Caterham High School View Details rhysida
Ransomware Burton & South Derbyshire College View Details noescape United Kingdom
Ransomware ROCHESTER.EDU View Details clop United States
Ransomware Danbury Public Schools View Details 8base
Ransomware JHU.EDU View Details clop United States
Ransomware USG.EDU View Details clop United States
Ransomware Yunus Emre Institute Turkey View Details medusa Türkiye
Ransomware Polanglo View Details 8base Poland
Ransomware Enfield Grammar School View Details rhysida
Ransomware Hochschule Kaiserslautern View Details rhysida Germany
Ransomware Reeds Spring School District View Details karakurt
Ransomware Universitas Matthiae Belii association View Details medusa Slovakia
Ransomware Galveston College View Details akira
Ransomware Eastside Union School District View Details karakurt
Ransomware University of Hawaii View Details noescape United States
Ransomware bbrook.org View Details lockbit3
Ransomware SKILLSOFT.COM View Details clop
Ransomware SCU.EDU View Details clop United States
Ransomware UMSYSTEM.EDU View Details clop United States
Ransomware San Luis Obispo County Office of Education View Details 8base
Ransomware Salem Community Schools View Details medusa
Ransomware studentclearinghouse.org View Details clop
Ransomware Bunker Hill Community College View Details snatch
Ransomware Paris High School View Details rhysida
Ransomware Northeastern State University View Details rhysida United States
Ransomware MICHENER.CA View Details clop Canada
Ransomware HCI.EDU View Details clop United States
Ransomware wsisd.net View Details lockbit3
Ransomware PENNCREST School District View Details royal
Ransomware Tour Partner Group View Details medusa United Kingdom
Ransomware worldlearning.org View Details lockbit3
Ransomware newarka.edu View Details lockbit3 United States
Ransomware The Thomas Hardye School View Details rhysida
Ransomware Middlesex County Public Schools View Details akira United States
Ransomware Pacific Union College View Details trigona
Ransomware nycollege.edu View Details lockbit3 United States
Ransomware sfponline.org View Details lockbit3
Ransomware Gaston College View Details nokoyawa United States
Ransomware Snodland C of E Primary School View Details nokoyawa United Kingdom
Ransomware Miami University View Details nokoyawa United States
Ransomware Medical University of the Americas View Details nokoyawa Canada
Ransomware Chattanooga Heart Institute View Details karakurt
Ransomware THE HARCOURTS FOUNDATION (AUSTRALIA) PTY LTD View Details 8base
Ransomware Thayer Academy View Details 8base
Ransomware Zoni Language Centers View Details bianlian
Ransomware Loreto Normanhurst View Details medusa Australia
Ransomware csagh.org View Details lockbit3
Ransomware NASHUA SCHOOL DISTRICT View Details royal United States
Ransomware Z*** ******** ******s View Details bianlian
Ransomware Ipleiria Student Branch View Details akira
Ransomware Mercer University View Details akira
Ransomware Deer Lakes School District View Details bianlian
Ransomware unity.edu View Details lockbit3 United States
Ransomware stmarys.net View Details lockbit3
Ransomware Southern West Virginia Community and Technical College View Details royal United States
Ransomware Brighton Hill Community School View Details vicesociety United Kingdom
Ransomware Great Falls College of Technology View Details royal United States
Ransomware Montana State University View Details royal United States
Ransomware BridgeValley Community & Technical College View Details akira
Ransomware EdisonLearning View Details royal
Ransomware bg2i.fr View Details lockbit3 France
Ransomware Settlement Music School View Details akira
Ransomware keystonesmiles.org View Details lockbit3
Ransomware Lake Dallas Independent School District View Details royal

Explore other industry sectors