Industry sector

Ransomware attacks on the Education sector

Ransomware groups have listed 1,274 Education organisations on their leak sites since January 2022; the latest post is from 8 September 2026. Most active groups: Lockbit3, Qilin and Incransom. Most affected countries: United States, United Kingdom and Canada.

Total posts 1,274
First seen 2022-01-01
Latest post 2026-09-08
Groups 132

Most active groups

  1. Lockbit3 115
  2. Qilin 87
  3. Incransom 74
  4. Vicesociety 64
  5. Rhysida 58
  6. Clop 46
  7. Medusa 45
  8. Safepay 45
  9. Ransomhub 43
  10. Fog 39
All groups →

Most affected countries

  1. United States 515
  2. United Kingdom 68
  3. Canada 34
  4. France 31
  5. Brazil 30
  6. Germany 26
  7. Australia 23
  8. India 22
  9. Italy 19
  10. Thailand 14
All countries →

Education ransomware victims per year

154 2022
305 2023
250 2024
344 2025
221 2026

Latest 100 victims

Search every post in the full table.
Victim Group Country Discovered
Alaska Electrical Apprenticeship Qilin United States
University of San Francisco Thegentlemen United States
TrainMe Direwolf Colombia
MSM Unify: Global Education Platform - CA Kazu Canada
Spirit Cultural Exchange - US Kazu United States
Hochschule Heilbronn Bildungscampus Panzer Germany
Westfield Public School District Incransom United States
Uak University Qilin Turkey
Total Education Solutions Wallstreet United States
tum.com.mx Krybit Mexico
vedantaainstitute.in Krybit India
Andover Wallstreet United States
Newton County School System Qilin United States
Sprachakademie Rhein-Ruhr Storm Germany
Brazosport College Qilin United States
Knottingham Trent University ShadowByt3$ United Kingdom
Battle Creek Public Schools Rhysida United States
Deer Creek-Mackinaw CUSD Direwolf United States
Studee Direwolf —
The University of Delhi (DU) DYSPHOR1A India
GUSTO College GLMS DYSPHOR1A Thailand
Strategy First International College DYSPHOR1A Myanmar
Southeastern Oklahoma State University Interlock United States
The University of the West Indies Qilin Trinidad and Tobago
Arizona State University (ASU) Direwolf United States
Albania's Official National Teacher Training Portal Emperador Albania
Loescher editore Torino Qilin Italy
Zanichelli Qilin Italy
SMAPCENTER.UAH.EDU Clop United States
NTU Alumni Club Thegentlemen Singapore
Hong Kong Baptist University Thegentlemen Hong Kong
Université Libre de Bruxelles Qilin Belgium
uva.edu.br L Group Brazil
Surakarta University Panzer Indonesia
Laurel Institutes Dark Project United States
Loyalist College Incransom Canada
cesmac.edu.br Krybit Brazil
Universitatea De Vest Vasile Goldi Din Arad Qilin Romania
Efrata College of Education Thegentlemen Israel
Collge Mont Notre-Dame de Sherbrooke Cmdorganization Canada
landesmuseum.de Safepay Germany
braywoodschool.co.uk Safepay United Kingdom
vit-best.com Chaos Russia
Universitatea de Vest „Vasile Goldiș” din Arad Qilin Romania
Newcastle University ExfilSquad United Kingdom
District of Columbia Public Schools ExfilSquad United States
upland.k12.ca.us Safepay United States
Kean University Qilin United States
Highline Community College Qilin United States
Salida Union School District Qilin United States
St. Francis Xavier Catholic School System Worldleaks United States
College O'Sullivan de Québec Kairos Canada
Universidad Nacional de Mar del Plata Nova Argentina
The Nueva School Qilin United States
Saint George's School Cmdorganization Colombia
Cedar Crest College Nightspire United States
Centro Científico e Cultural de Macau Qilin Portugal
Borger ISD Interlock United States
Mount Royal University Cmdorganization Canada
Richmont Graduate University AiLock United States
stedwardscatholicfirstschool.co.uk Safepay United Kingdom
tricountyhs.org Incransom United States
Musashino University Qilin Japan
Official Statement: Protecting palatineschool.org Infrastructure Stormous —
Driving School Software PrinzEugen —
sansilvestre.edu.pe Krybit Peru
Reynella East College Interlock Australia
bits-pilani.ac.in Dragonforce India
Wall ISD Cmdorganization United States
Editora Irmãos Vitale Payload Brazil
greyhighschool.com Lockbit5 United States
utb.edu.vn Lockbit5 Vietnam
icc.edu Shinyhunters United States
moody.edu Shinyhunters United States
glendale.edu Shinyhunters United States
hccs.edu Shinyhunters United States
Kozminski University Thegentlemen Poland
UiTM Holdings Thegentlemen Malaysia
shottermill-jun.surrey.sch.uk Lockbit5 United Kingdom
delano.k12.mn.us Lockbit5 United States
Global Schools Foundation Fulcrumsec Singapore
nottingham.ac.uk Shinyhunters United Kingdom
Kinetic Education Qilin Australia
GRIP Outreach For Youth Nightspire United States
Institucion Cervantes Thegentlemen Argentina
Universitas Nasional Nova Indonesia
katholiekamersfoort.nl Stormous Netherlands
Lake Washington School District Cmdorganization United States
UEI College Termite United States
Daegu University AI Department Nova South Korea
Alamo Heights School District Qilin United States
My English House academy Nova Spain
ctps.tp.edu.tw Krybit Taiwan
University of Valencia Nova Spain
Wysza Szkoa Biznesu National Louis University Nova Poland
University of Finance and Administration Thegentlemen Czechia
Don Bosco Technical Institute of Makati Nova Philippines
Australian College of Business Intelligence Qilin Australia
Tower View Primary School Rhysida United Kingdom
PowerCampus ShadowByt3$ India