Strategy First International College
August 20, 2026
•[ ransomware, education ]
Strategy First International College was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Myanmar. Website: strategyfirst.edu.mm. Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.
GUSTO College GLMS
August 20, 2026
•[ ransomware, education, technology ]
GUSTO College GLMS was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: Thailand. Website: gusto-education.com. Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
NetExam
August 20, 2026
•[ ransomware, technology, education ]
NetExam was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Website: netexam.com. NetExam (netexam.com) the website of NetExam LMS+, a US-based SaaS learning management system built for external audiences rather than internal employees. It helps companies train, certify, and enable their channel partners, customers, and association members, with features like certification tracking, self-paced and instructor-led courses, e-commerce, white-labeling, Salesforce integration, and AI-powered course authoring agents. Headquartered in Dallas, with clients including AMD, AT&T, Oracle, Trellix, and Sabre. [Size: 18.1 MB | Sector: Education, Retail, Other]
Gruppo Spaggiari Parma
August 20, 2026
•[ ransomware, technology, education ]
Gruppo Spaggiari Parma was listed as a victim on the leak site of the xpl0itrs ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Manufacturing. Country: Italy. Website: spaggiari.eu. School management software
The University of Delhi (DU)
August 20, 2026
•[ ransomware, education ]
The University of Delhi (DU) was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Education. Country: India. Website: du.ac.in. The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral programs across subjects like science, arts, commerce, law, and technology.
Studee
August 21, 2026
•[ ransomware, education, technology ]
Studee was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Education. Website: studee.com. [AI generated] Studee is an online platform that helps international students find and apply to universities around the world. Operating in the education technology industry, the company is based in the United Kingdom. It connects prospective students with hundreds of universities globally, offering guidance on courses, applications, and admissions processes, making higher education more accessible to students seeking to study abroad.
Deer Creek-Mackinaw CUSD
August 21, 2026
•[ ransomware, education ]
Deer Creek-Mackinaw CUSD was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Education. Country: United States of America. Website: deemack.org. Education
Schardein Mechanical
August 21, 2026
•[ ransomware, manufacturing, healthcare ]
Schardein Mechanical was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: schardein.com. Schardein Mechanical is a trusted mechanical contractor providing top-of-the-line engineering services to commercial clients in Kentucky and Southern Indiana. Their offerings include design, installation, maintenance, and replacement of HVAC, plumbing, and process piping systems, with 24/7 availability for emergency services. The company caters to a diverse range of industries, including healthcare, education, and manufacturing, ensuring high-quality installations by skilled professionals. With multiple locations in Louisville, Elizabethtown, and Bowling Green, Schardein Mechanical has been delivering innovative solutions since 1984.
The company headquarters is located in 1810 Outer Loop, Louisville, KY 40219, United States.. 51-200 Employees
Senvibe
August 24, 2026
•[ ransomware, technology, education ]
Senvibe was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. SENVIBE project is to improve and build national educational capacities, cooperation and competences in dealing with environmental and occupational noise and vibration (No&Vib) engineering issues in accordance with ongoing EU integration strategies and the needs identified in Serbia.
FFKR Architects
January 9, 2026
•[ ransomware, technology, healthcare ]
FFKR Architects was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-09. Sector: Professional Services. Country: United States of America. Website: ffkr.com. FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a wide range of services including architecture, landscape architecture, interior design, and environmental graphic design. The firm is known for its design excellence and commitment to environmental leadership, serving various sectors such as healthcare, education, hospitality, and commercial projects. With a team of over 170 professionals, FFKR empowers clients through innovative visualization techniques, ensuring informed decision-making.
Brazosport College
August 25, 2026
•[ ransomware, education ]
Brazosport College was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Education. Country: United States of America. Website: www.brazosport.edu.
Sprachakademie Rhein-Ruhr
August 24, 2026
•[ ransomware, education ]
Sprachakademie Rhein-Ruhr was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Education. Country: Germany. Website: sprachakademie.eu. Sprachakademie Rhein-Ruhr has been providing German language courses since 1995, aimed at individuals looking to study and build a life in Germany. They offer a range of courses from A1 to C1 levels, including specialized programs for medical professionals and online options. As a certified telc examination center, they facilitate language proficiency tests in accordance with the Common European Framework of Reference for Languages. Their services are designed to support clients in obtaining university access and visa acquisition in Germany.
The company headquarters is located in Hansastrae 79, 47058 Duisburg, Germany. 11-50 Employees
Directorate-General for Education
August 28, 2026
•[ ransomware, government, education ]
Directorate-General for Education was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Government & Defense. Country: Portugal. Website: dgeec.medu.pt. The Direo-Geral de Estatsticas da Educao e Cincia (DGEEC) is a Portuguese government agency responsible for collecting, analyzing, and publishing official statistics on education, science, and technology.
Newton County School System
August 28, 2026
•[ ransomware, education ]
Newton County School System was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Education. Country: United States of America. Website: www.newtoncountyschools.org.
MONTCAU
August 29, 2026
•[ ransomware, education ]
MONTCAU was listed as a victim on the leak site of the majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-29. PUBLICATION SCHEDULED. [LEAK / 6341 FILES]
Uniguacu
August 29, 2026
•[ ransomware, education, financial ]
Uniguacu was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Other. Country: Brazil. Website: uniguacu.com.br. full commitment of the network having full access to infrastructure, thus ensuring access to the database containing confidential and financial information! I obtained some images that compromise the financial sector. You have 13 days to trade. If the trade doesn't occur as planned, we will have to take severe measures. I sent some images to show the veracity of the attack. The warning has been given! [Size: 151.0 MB | Sector: Education]
bkc.org
August 31, 2026
•[ ransomware, education ]
bkc.org was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: Japan. Website: bkc.org. bkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...
tricountyhs.org
July 1, 2026
•[ ransomware, education ]
tricountyhs.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-01. Sector: Education. Country: United States of America. Website: tricountyhs.org. Flowers Early Learning (formerly known as Tri-County Head Start) is a non-profit 501(c)(3) organization providing free, high-quality early childhood education and family support services across Berrien, Cass, and Van Buren counties in Southwest Michigan. Funded by a federal grant through the Office of Head Start, the organization serves eligible families with children from birth to age five, as well as expectant mothers.
stedwardscatholicfirstschool.co.uk
July 6, 2026
•[ ransomware, education ]
stedwardscatholicfirstschool.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: stedwardscatholicfirstschool.co.uk. The school provides education for children aged 5 to 9 years and operates as a Voluntary Aided School under the
Richmont Graduate University
July 7, 2026
•[ ransomware, education ]
Richmont Graduate University was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Education. Country: United States of America. Website: richmont.edu. Richmont Graduate University is a Christian graduate institution offering master's programs in counseling and ministry, available both online and on-campus.
