Fagen Friedman & Fulfrost LLP
April 17, 2026
•[ ransomware, education ]
Fagen Friedman & Fulfrost LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: United States of America. Website: f3law.com. [AI generated] Fagen Friedman & Fulfrost LLP is a California-based law firm specializing in education law. The firm provides legal services exclusively to public educational agencies, including K-12 school districts, community colleges, and county offices of education throughout California. Its practice areas include labor and employment, special education, student matters, governance, and litigation. The firm operates entirely within the United States.
st-bernards.bham.sch.uk
April 17, 2026
•[ ransomware, education ]
st-bernards.bham.sch.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: st-bernards.bham.sch.uk. St Bernards provides primary education for children, including: English, maths, science and general curriculum subjects Religious education (Catholic values are
Udemy, Inc. (udemy.com)
April 24, 2026
•[ ransomware, education, technology ]
Udemy, Inc. (udemy.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Education. Country: United States of America. Website: udemy.com. Over 1.4M records containing PII and other internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 27 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 24 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
St Stephens International
November 4, 2025
•[ ransomware, education ]
St Stephens International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2025-11-04. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. https://www.zoominfo.com/c/st-stephens-international-school/1293733677 www.sis.edu St Stephens International School offers educational programs at its Bangkok and Khao Yai campuses, catering to a diverse student population. The school provides weekend schooling and various camps for groups, aiming to enhance the educational experience. It is associated with several organizations including Ocean Glass, Ocean Property, and Bandara Group. The institution focuses on fostering an international learning environment for its students
bg.ac.rs
April 27, 2026
•[ ransomware, education, financial ]
bg.ac.rs was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Education. Country: Serbia. Website: bg.ac.rs. University of Belgrade. Internal documents, letters, attachments, financial reports. Total size: ...
mahidol.ac.th
April 27, 2026
•[ ransomware, education ]
mahidol.ac.th was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Education. Country: Thailand. Website: mahidol.ac.th. Mahidol University is a major public research university established in Thailand with deep histor...
Lille University
March 1, 2026
•[ ransomware, education ]
Lille University was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: France. Website: univ-lille.fr. [AI generated] Lille University, also known as University of Lille, is a well-recognized public university located in Lille, France. It was established in 1562 and offers a wide range of educational programs covering multiple disciplines. The university is known for its focus on research and innovation, and boasts a diverse student population from around the globe. In addition to its academic achievements, Lille University also encourages sports and cultural activities.
DreamUp
March 1, 2026
•[ ransomware, education, technology ]
DreamUp was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: United States of America. Website: dreamup.org. [AI generated] DreamUp is an American company that provides space-based educational opportunities to students of all ages. They offer various programs that utilize the unique environment of space to spark interest in Science, Technology, Engineering, and Mathematics (STEM) fields. DreamUp provides tools to conduct research in microgravity through partnerships with SpaceX, the International Space Station and other space organizations.
fgv.br
March 2, 2026
•[ ransomware, education ]
fgv.br was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-02. Sector: Education. Country: Brazil. Website: fgv.br. Fundao Getulio Vargas (FGV) is a prestigious educational institution in Brazil, offering a wide range of programs including undergraduate, MBA, master's, and doctoral courses. It serves students, professionals, and organizations, focusing on developing leadership and providing high-quality education. FGV also engages in research and provides technical assistance to both public and private sectors, contributing to national and international debates. Additionally, FGV promotes cultural initiatives and publishes academic works to enhance education and research in the country.
Franz-Sales-Haus.de
March 3, 2026
•[ ransomware, education, hack ]
Franz-Sales-Haus.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-03-03. Sector: Education. Country: Germany. Website: Franz-Sales-Haus.de. Located at Steeler Strae 261, 45138 Essen, is a support organization dedicated to empowering people with disabilities to live self-determined
salfordcc.ac.uk
March 6, 2026
•[ ransomware, education ]
salfordcc.ac.uk was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-03-06. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: salfordcc.ac.uk. Salford City College is one of the largest further education providers in Greater Manchester. It was established in 2009 following a merger between several predecessor colleges.
Wagon Mound Public Schools
March 9, 2026
•[ ransomware, education ]
Wagon Mound Public Schools was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-03-09. Sector: Education. Country: United States of America. Website: wm.k12.nm.us. Wagon Mound Public Schools provides education to students in the Wagon Mound area, providing resources and support for both elementary and middle schools. However, they neglected to address the security of their materials, resulting in the compromise of all their personal data, including the school's blueprints. We present to your attention a 80 GB of data, which includes staff and student information, their phone numbers, residence addresses, and passport numbers.
A J Taylor Electrical
March 10, 2026
•[ ransomware, healthcare, education ]
A J Taylor Electrical was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-03-10. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: ajtaylor-electrical.com. Data breach at electrical installation company: drawings, tenders, and other data on the healthcare and education sectors.
Salford City College
March 6, 2026
•[ ransomware, education ]
Salford City College was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-06. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.salfordcc.ac.uk.
Big Brothers Big Sisters
March 5, 2026
•[ ransomware, education ]
Big Brothers Big Sisters was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-03-05. Sector: Education. Country: United States of America. Website: www.bbbs.org. Data size claimed by the group: 20GB. - Students List- Background Check Records- Internal Documents
St Fabian Catholic
March 12, 2026
•[ ransomware, education ]
St Fabian Catholic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-12. Sector: Education. Country: United States of America. Website: stfabian.org. stfabian.org zoominfo.com/c/st-fabian-catholic-church--school/152879338 St. Fabian Catholic Church and School in Farmington Hills, MI offers a range of religious services and educational programs. Their services include various sacraments such as Baptism, Confirmation, and Eucharist, along with community involvement through worship and youth ministries. They aim to provide a welcoming environment for parishioners and students, encouraging participation and growth within the church community. The intended clients are families and individuals seeking spiritual guidance and quality education in a Catholic setting
Hebrew University of Jerusalem
March 13, 2026
•[ ransomware, education, leak ]
Hebrew University of Jerusalem was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-03-13. Sector: Education. Country: Israel. On Quds Day, a new chapter was written in the realm of cyber warfare. Handala Hack successfully targeted the Hebrew University of Jerusalem (huji.ac.il), one of the scientific and research symbols of the Zionist regime, in the most extensive cyber operation in recent years. In this sophisticated and coordinated operation, all servers of the Hebrew
Trinity Catholic High School
March 1, 2026
•[ ransomware, education ]
Trinity Catholic High School was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: United States of America. Website: www.trinitycatholichs.org. Data size claimed by the group: 500GB. Trinity Catholic High School offers a full array of co-curricular activities and sports programs. Our athletic programs include football, cheerleading, cross country, golf, swimming, tennis, weight lifting, basketball, volleyball, baseball, bowling, girls flag football, softball, lacrosse and track and field. Our State Championships include: football, women's soccer, baseball, wrestling and track.
Private University
March 3, 2026
•[ ransomware, education ]
Private University was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-03-03. Sector: Education. Country: United States of America. New Jersey Private University
Payap University
March 16, 2026
•[ ransomware, education ]
Payap University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-16. Sector: Education. Country: Thailand. Website: payap.ac.th. payap.ac.th zoominfo.com/c/payap-university/29803045 Payap University is an international educational institution offering a variety of programs, including interdisciplinary studies and multiple international programs. It provides services such as student exchange programs, language enhancement, and various proficiency testing centers. The university aims to cater to a diverse international clientele seeking higher education and innovation opportunities. Additionally, it hosts events like the International Conference on Lifespan Innovation
