VUS - The English Center
September 29, 2026
•[ ransomware, education ]
VUS - The English Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Education. Country: Vietnam. Website: teachenglish.vus.edu.vn. teachenglish.vus.edu.vn zoominfo.com/c/vus---the-english-center/1308758011 VUS (Vietnam USA Society English Centers) (founded 1997, Ho Chi Minh City) is Vietnam's largest English-language school chain 70+ centers nationwide with 7,000+ staff, 600+ foreign teachers and 250,000+ students a year (3 million cumulative). It runs Cambridge, IELTS (IDP), TOEFL/TOEIC (ETS) and Oxford University Press programs plus a joint degree track with the University of Saint Mary (USA), holding Guinness World Record and Vietnam Record awards. The teachenglish.vus.edu.vn portal recruits TEFL/TESOL/CELTA-qualified native-speaking teachers (~$2035/hr) with sponsored work visas, housing help, flights and a formal career ladder (Teacher Head Teacher).
Datacomm Services
September 29, 2026
•[ ransomware, technology, government ]
Datacomm Services was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Technology. Country: United States of America. Website: dscdatacomm.com. dscdatacomm.com zoominfo.com/c/datacomm-services-corp/347799114 Datacomm Services Corporation (DSC) (operating since 1988, Memphis, Tennessee) is a low-voltage systems contractor serving the Memphis/Mid-South region (TN, MS, AR) for nearly 40 years. It designs and installs structured cabling (Cat 5eCat 6A and fiber optics), outside-plant networks, access control, CCTV, intrusion alarms and paging/AV systems acting as a single point of contact for all low-voltage building systems. Led by President Allen Hendry and EVP/CEO Chuck Jennings, it runs a lean ~22-person team with two certified RCDD designers on staff and revenue around $10 million/year. Clients range from small service tickets to $1M+ projects offices, industrial sites and especially school systems and government buyers (it holds TIPS purchasing contracts through 2028). It carries an A+ BBB rating and clean legal record, with strong reviews for workmanship and service. Main limits: purely regional footprint and dependence
M. B. Kahn Construction Co.
August 1, 2026
•[ ransomware, manufacturing, healthcare ]
M. B. Kahn Construction Co. was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-01. Sector: Manufacturing. Country: United States of America. Website: mbkahn.com. [AI generated] M. B. Kahn Construction Co. is a general contracting and construction management firm based in the United States, headquartered in Columbia, South Carolina. Founded in 1926, the company operates primarily across the southeastern United States. It serves sectors including commercial, industrial, healthcare, education, and government markets, delivering services such as design-build, preconstruction planning, and facility construction.
cesmac.edu.br
August 4, 2026
•[ ransomware, education ]
cesmac.edu.br was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Education. Country: Brazil. Website: cesmac.edu.br. Centro Universitrio CESMAC (CESMAC University Center) is the largest private higher education institution in the state...
Loyalist College
August 4, 2026
•[ ransomware, leak, education ]
Loyalist College was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-04. Sector: Education. Country: Canada. Website: loyalistcollege.com. The management of this institution was repeatedly warned about the disclosure of hundreds of personal data. Each of you who is faced with the consequences of the leak can be absolutely sure that the management of Loyalist College absolutely does not care about its students, employees and partners.
-------------------------
Loyalist is Ontario's Destination College, empowering students, faculty, staff, and partners through experiential, industry cluster-based education, training and applied research programs. The College provides job-ready graduates for, and knowledge transfer to, industry and the community.
Aptara
July 22, 2026
•[ ransomware, leak, technology ]
Aptara was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Professional Services. Country: India. Website: aptaracorp.com. [AI generated] Aptara is a US-based digital content transformation company specializing in publishing, learning, and content solutions. Operating primarily in the publishing and e-learning industries, it provides services such as content conversion, instructional design, digital publishing, and XML/DITA authoring. Founded in 1988 and headquartered in Falls Church, Virginia, Aptara serves clients in education, government, and corporate sectors globally, helping organizations transition traditional content into digital formats.
Laurel Institutes
June 8, 2026
•[ ransomware, education, leak ]
Laurel Institutes was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-06-08. Sector: Education. Country: United States of America. Website: www.laurel.edu. About Laurel Institutes Laurel Institutes offers focused education and professional certifications across various fields, including business, healthcare, trades, cosmetology, and culinary arts. The institution emphasizes hands-on training and small class sizes to foster student engagement and skill development. Their programs are designed to prepare students for successful careers in industries they are passionate about. With multiple campuses and online options, Laurel Institutes aims to connect students with local employers and provide resources for career advancement. A "Laurel Institutes" company suffered a cyberattack that led to the theft of approximately 50+ GB of sensitive data. Exposed files include financial confidential papers, bank records and medical personal information. Personal data of more than 1,000 students and staff members was leaked Download here: http://tjaaioz32salcoj63ttxra6nfqggwbcezkzpwnhyoiwq5tuimzmsb3qd.onion
Surakarta University
August 5, 2026
•[ ransomware, education ]
Surakarta University was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-05. Sector: Education. Country: Indonesia. Website: ums.ac.id. Universitas Surakarta (UNSA) is a technology-based university committed to excellence in education, business, and entrepreneurship, responsive to industry and community needs. It offers a range of programs including undergraduate, professional conversion, and postgraduate studies, aimed at developing competent and character-driven graduates. UNSA provides a flexible and collaborative learning environment, supported by experienced faculty and modern infrastructure. The university invites prospective students, partners, and the community to join in building a brighter and more meaningful future together.
ZS Salovnova
August 6, 2026
•[ ransomware, education ]
ZS Salovnova was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-06. Country: Czechia. Website: zssalounova.cz. zssalounova.cz Z alounova is a primary school located in the Vtkovice district of Ostrava, Czech Republic, operating across two buildings on alounova and Halasova streets. The institution provides comprehensive standard education alongside specialized programs, a wide range of extracurricular clubs, and a full school counseling facility. It actively supports student success through dedicated staff, including school psychologists, special educators, and career counselors, as well as various educational and sports projects.
ratnasagar.com
April 26, 2025
•[ ransomware, education ]
ratnasagar.com was listed as a victim on the leak site of the L Group ransomware group; the attack is estimated to have taken place on 2025-04-26. Country: India. Website: ratnasagar.com. [AI generated] Ratnasagar is an Indian educational publishing company based in India. It specializes in producing academic books, textbooks, and educational materials primarily for school-level students. The company serves the K-12 segment, offering curriculum-aligned content across various subjects. Operating in the education and publishing industry, Ratnasagar is known for distributing its materials through schools and educational institutions across India.
uva.edu.br
February 17, 2025
•[ ransomware, education ]
uva.edu.br was listed as a victim on the leak site of the L Group ransomware group; the attack is estimated to have taken place on 2025-02-17. Sector: Education. Country: Brazil. Website: uva.edu.br. [AI generated] Universidade Veiga de Almeida (UVA) is a private higher education institution based in Rio de Janeiro, Brazil. Founded in 1972, it offers undergraduate and postgraduate courses across various fields including law, health sciences, engineering, and business administration. Operating in the education sector, UVA serves thousands of students through multiple campuses in Rio de Janeiro, providing in-person and distance learning programs.
Université Libre de Bruxelles
August 9, 2026
•[ ransomware, education ]
Universit Libre de Bruxelles was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Education. Country: Belgium. Website: www.ulb.be.
Hong Kong Baptist University
August 9, 2026
•[ ransomware, education ]
Hong Kong Baptist University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Education. Country: Hong Kong. Website: hkbu.edu.hk. hkbu.edu.hk zoominfo.com/c/hong-kong-baptist-university/429650952 Hong Kong Baptist University (HKBU) is a leading public research university established in 1956 in Hong Kong.
It is highly regarded for its academic excellence, particularly in liberal arts, business, communication, and traditional Chinese medicine.
As one of the region's eight statutory publicly funded universities, it is dedicated to fostering global citizenship and innovative research.
NTU Alumni Club
August 9, 2026
•[ ransomware, education ]
NTU Alumni Club was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-09. Sector: Education. Country: Singapore. Website: ntualumni.org.sg. ntualumni.org.sg zoominfo.com/c/ntu-alumni-club/447180090 The NTU Alumni Club is an independent association for graduates of Nanyang Technological University in Singapore.
It serves as a dedicated platform for alumni to connect, network, and maintain a lifelong relationship with their alma mater.
Members enjoy exclusive perks, career opportunities, and access to physical facilities like lounges and co-working spaces at their clubhouse.
EKEPIS
August 14, 2026
•[ ransomware, leak, government ]
EKEPIS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Greece. Website: ekepis.gr. ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource.
Zanichelli
August 16, 2026
•[ ransomware, education ]
Zanichelli was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Italy. Website: www.zanichelli.it.
Loescher editore Torino
August 16, 2026
•[ ransomware, education ]
Loescher editore Torino was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Italy. Website: www.loescher.it.
Albania's Official National Teacher Training Portal
August 16, 2026
•[ ransomware, leak, education ]
Albania's Official National Teacher Training Portal was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-16. Sector: Education. Country: Albania. Albanias official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide.
This leak include data such as;
Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF. [Size: 5.9 GB | Sector: Education, Government]
The University of the West Indies
August 17, 2026
•[ ransomware, education ]
The University of the West Indies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-17. Sector: Education. Country: Trinidad & Tobago. Website: www.uwi.edu.
Southeastern Oklahoma State University
July 31, 2026
•[ ransomware, leak, education ]
Southeastern Oklahoma State University was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Education. Country: United States of America. Website: se.edu. Southeastern Oklahoma State University is a public, four-year university located in Durant, Oklahoma. A data breach exposed student educational records (including names, contact information, Social Security numbers, grades, enrollment data, financial aid information, disciplinary records, and medical information contained in educational records). This breach violates the Family Educational Rights and Privacy Act (FERPA), the HIPAA Privacy Rule, and students' common-law privacy rights. The breach affected employee personal data and injury information, including employee name, date of birth, date of injury, as well as Social Security number, Medicare card, and child custody/consent status. More than 90,000 student names, Social Security numbers, and student identification numbers, as well as Forms 1095-C and more than 490 documents.
