Weymouth and Kingston Maurward College (Dorset College group)
August 15, 2025
•[ social, phishing, education ]
A phishing incident at Dorset Colleges Weymouth and Kingston Maurward campus resulted in the compromise of multiple staff email accounts around August 15, 2025. Spam was sent from affected accounts. Exposure may have included contact details of prior email correspondents. The breach was contained swiftly with minimal impact. Reported to the ICO.
Kokomo Solutions Inc. (telehealth & reporting vendor for LAUSD)
December 11, 2024
•[ hack, education ]
An unauthorized third party accessed files on Kokomo Solutions' network on December 11, 2024. The breach potentially compromised a range of sensitive student data (PII, health info, IDs), though exact scope wasn't disclosed; notification occurred on August 5, 2025.
Rochester Schools (IN)
August 13, 2025
•[ hack, education ]
Investigation ongoing; small group of staff email accounts impacted.
Scotch College, Melbourne
August 9, 2025
•[ hack, education ]
Scotch Colleges IT systems were accessed by an unknown third party over the weekend of August 910, 2025. The school shut down servers, disabled accounts, and enlisted forensic and ACSC support. In a letter, they apologized to families and alumni for the breach and warned to be vigilant pending the completion of investigations.
University of Western Australia
August 9, 2025
•[ hack, education ]
University of Western Australia detected unauthorized access to password data of thousands of staff and students on or around August 9, 2025. As a precaution, all accounts were locked, and passwords reset. There is no evidence any other data was accessed, and no indication of ransomware. Systems have been restored with enhanced security measures.
Institute Ruđer Bošković (administrative/professional services IT)
July 31, 2025
•[ ransomware, education ]
IRB was hit by a ransomware attack on July 31, 2025 via Microsoft SharePoint ToolShell vulnerabilities; administrative/professional services systems were encrypted. IRB refused to pay, isolated affected segments, and restored from backups by Aug 8; later updates confirmed full service restoration and no evidence of data exfiltration.
Manassas Park City Schools
June 12, 2025
•[ ransomware, malware, education ]
The MPCS network was infiltrated and encrypted via ransomware around June 12, 2025; data may have been accessed including full names paired with SSNs, passport numbers, or financial account details. No group has claimed responsibility. Investigation ongoing and FBI notified.
Columbia University IT Systems
May 16, 2025
•[ leak, education ]
An unauthorized actor gained access to university systems on May 16, 2025, and exfiltrated approximately 460GB of sensitive personal, financial, and health data following an IT outage; patient records from the medical center were unaffected; notifications are underway
IMDataCenter
July 15, 2025
•[ leak, hack, misconfiguration ]
Unsecured AWS S3 bucket exposed ~38GB of records; hacker downloaded ~75GB, including ~20M emails, ~37M phone numbers, 50k SSNs/DOBs; affects multiple industries (healthcare, airlines, universities, dealerships). Bucket later secured; lawsuits pending.
Electronic School (ГИС "Электронная школа"), Novosibirsk
January 15, 2025
•[ hack, ddos, education ]
On January 15, 2025, a powerful DDoS attack targeted Novosibirsks Electronic School digital diary platform. The attack, described as one of the most massive in the region, caused several hours of disruption before service was restored.
Pembina Trails School Division
December 2, 2024
•[ ransomware, financial, leak ]
Canadian school division compromised by Rhysida ransomware Dec 2, 2024. Attack disrupted thousands of devices and exposed ~35,000+ student records and staff payroll/financial data. Group attempted $1.7M ransom before leaking stolen data on the dark web.
45 schools in Rhineland-Palatinate served by IT provider Topackt
January 15, 2025
•[ hack, education ]
Die Server der betroffenen Schulen in der Pfalz sind weitgehend wiederhergestellt. Das Backup-System des Betreibers hat offensichtlich funktioniert.
~100 UTEP Students
January 22, 2025
•[ social, phishing, education ]
The University of Texas at El Paso (UTEP) is urging students to remain vigilant following a phishing attack that compromised several accounts.
Upper Canada District School Board (UCDSB)
January 5, 2025
•[ education ]
Board's Jan. 22 update reveals personal information about staff members, students, some donors, and bursary recipients was compromised.
Valdosta State University (VSU)
January 1, 2025
•[ hack, education ]
Valdosta State University is working to fully restore its network and university systems after discovering a significant cybersecurity intrusion.
Starkville-Oktibbeha Consolidated School District
January 1, 2025
•[ ransomware, education ]
A data breach that has crippled Starkville-Oktibbeha Consolidated School Districts network appears to be a ransomware attack, according to online sources.
Laramie County Library System
January 7, 2025
•[ ransomware, malware, education ]
CHEYENNE Early Tuesday morning, the Laramie County Library System was the victim of a ransomware attack that shut down library servers and immobilized most digital services.
South Portland Public Schools
January 6, 2025
•[ hack, education ]
South Portland Public Schools in Maine says it was forced to take its network after a cyberattack was discovered over the weekend.
Eindhoven University of Technology
January 6, 2025
•[ hack, education ]
Eindhoven University of Technology cancels lectures and other educational activities following a cyberattack, although it is expected to have only a limited impact as teaching is reduced while students prepare for exams.
PowerSchool
December 19, 2024
•[ hack, education ]
Education software firm PowerSchool confirms it suffered a cybersecurity incident that allowed a threat actor to steal the personal information of students and teachers from school districts using its PowerSchool SIS platform.
