Humboldt
September 14, 2026
•[ ransomware, education ]
Humboldt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Other. Country: Brazil. Website: humboldt.com.br. humboldt.com.br zoominfo.com/c/humboldt/372537346 Colegio Humboldt 300gb DATA Germany's official school in So Paulo founded in 1916 by German immigrants (first class: 41 students, May 1, 1916), now a non-profit bilingual school of ~1,2001,300 students (ages 218, ~295 staff) on a 60,000 m Interlagos campus built with German government funding (opened 1999), maintained by the parents' association SEBRB. Its dramatic history: closed twice by world wars 1917 (WWI) and 1942 (WWII, when all assets were confiscated and took a 10-year legal battle to recover) before parents rebuilt it into a top institution. Programs: two tracks (Bilingual 40% German; International German 80% German leading to the Abitur, with 100% pass rate and direct entry to German/European universities), plus DSD I/II, Cambridge, DELE certifications, and its crown jewel the largest German dual vocational training center outside Germany (since 1982: 2-year technical programs in Administration, Logistics, IT.
Goteborgsregionens Tekniska Gymnasium
September 14, 2026
•[ ransomware, education, technology ]
Goteborgsregionens Tekniska Gymnasium was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Education. Country: Sweden. Website: gtg.se. gtg.se zoominfo.com/c/goteborgsregionens-tekniska-gymnasium/458572877 GTG technical upper-secondary school (gymnasium) owned by 13 Gothenburg-area municipalities (via the Gteborgsregionens kommunalfrbund) founded in 2006 specifically to solve the region's engineering talent shortage, the first inter-municipal school of its kind in Sweden. Located inside Lindholmen Science Park next to Chalmers, Volvo, SKF and Saab a genuine "school inside an industrial cluster" with guest lectures, real projects, internships and equipment from industry partners. Programs: Teknikprogrammet (design & product development, production, IT/media tech) and El- och energiprogrammet (automation, electricity, energy) ~700900 students, tuition-free, with graduates feeding directly into Chalmers engineering programs or industrial apprenticeships.
Springfield Public Schools
September 15, 2026
•[ ransomware, education ]
Springfield Public Schools was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Education. Country: United States of America. Website: springfieldpublicschools.com. Springfield Public Schools in Springfield, Massachusetts, is the third-largest school district in the state, with over 23,500 students and over 4,200 full-time employees. The school budget accounts for more than two-thirds of the city's total budget, which is approximately $700 million. Yet, they fail to ensure student safety and do nothing to address this problem. As a result, their negligence has led to a major breach of student and employee data. Extensive student databases are now available, containing last name, first name, student number, enrollment status, grade level, home address, home phone number, and ethnicity. You also have access to more than 10,000 company contacts, incident databases, phone records, and medical information. This raises the question: where are the allocated funds going? Why aren't they keeping their students safe?
Odyssey Charter School, Inc.
September 16, 2026
•[ ransomware, education ]
Odyssey Charter School, Inc. was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-16. Sector: Education. Country: United States of America. Odyssey Charter School, Inc. is a nonprofit organization operating tuition-free public charter schools in Florida for students from preschool through 12th grade, with a focus on academic achievement and whole-child development.
dg.ac.kr
September 8, 2026
•[ ransomware, education ]
dg.ac.kr was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Education. Country: South Korea. Website: dg.ac.kr. No data breaches
Westbridge Institute of Technology, Inc.
September 17, 2026
•[ ransomware, education ]
Westbridge Institute of Technology, Inc. was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Full Employee Information
Full Students Information
Full Guardians Information [Size: 102.0 MB | Sector: Education]
Universitt Hamburg
September 17, 2026
•[ ransomware, education ]
Universitt Hamburg was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Country: Germany. Website: uni-hamburg.de. Universitt Hamburg is the largest research and educational institution in Northern Germany, with over 42,000 students. It offers a wide range of academic programs and is recognized for its excellence in research and teaching. The university serves diverse target groups including prospective students, current students, researchers, and alumni. It collaborates with various societal and economic partners to address contemporary challenges and contribute to future solutions.
www.kendallhunt.com
September 18, 2026
•[ ransomware, education ]
www.kendallhunt.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: United States of America. Website: www.kendallhunt.com. Founded in 1944, Kendall Hunt Publishing is a publisher of hands-on, inquiry-based science, mathematics, and gifted curricula for grades PreK-12. Their research and standards-based programs are available in both print and digital components that encompass students, teachers, and parents. Kendall Hunt is headquartered in Dubuque, IA.
United Federation of Teachers
September 18, 2026
•[ ransomware, education ]
United Federation of Teachers was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: United States of America. Website: uft.org. Education / Labor Union US New York | The unions complete legal case archive approx. 181,420 documents: grievance and arbitration files, disciplinary appeal decisions and personnel case files, each named for a member; Contract documents: CBAs, MOUs, MOAs and side letters; Nurse-federation and health-benefit-fund case materials; Teacher evaluation and class-size complaint files; Staff search and case-view audit logs | Publication proceeds in batches after the deadline. The victim can verify everything and settle in their private negotiation room. | [ACTIVE: deadline 2026-09-19 14:58 UTC]
BeLi Teacher / FSC education centers (AWS)
September 18, 2026
•[ ransomware, education, technology ]
BeLi Teacher / FSC education centers (AWS) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: Vietnam. Website: beliteachers.com. Education / edtech Vietnam | The complete CRM lead database: 152,044 contact records names, emails, +84 phone numbers, cities, study interests, engagement history; The CRM file archive (tasks, forums, comments, customer files) migrated from GetFly CRM | Publication proceeds in batches after the deadline. | [ACTIVE: deadline 2026-09-20 02:47 UTC]
Ministry of Education — Argentina
September 18, 2026
•[ ransomware, government, education ]
Ministry of Education Argentina was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Government & Defense. Country: Argentina. Website: argentina.gob.ar. Government / education Argentina | Complete network-security configuration of the ministry network; 1.08M connection records: national library (BNM), school-book selection platform, scholarship systems (becasprogresar), titulosvalidez, certificadosinfd, sitrared; Evidence of the Monero cryptocurrency miner operating inside the ministry network | The ministry network is under a total blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]
Quy Nhon University
September 18, 2026
•[ ransomware, education ]
Quy Nhon University was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Education. Country: Vietnam. Website: qnu.edu.vn. Quy Nhon University (QNU) is a public, multidisciplinary university located in Quy Nhon City, Binh Dinh Province, Vietnam. Established in 1977, the university has a long-standing tradition in teacher education and has developed into a comprehensive institution offering a wide range of academic programs.
vit.ac.in
September 13, 2026
•[ ransomware, education, technology ]
vit.ac.in was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Education. Country: India. Website: vit.ac.in. VIT (Vellore Institute of Technology, official site vit.ac.in) is a well-known private university in India: founded in 1984 and granted university status in 2001, with its main campus in Vellore and additional campuses in Chennai, AP, and Bhopal; it is especially strong in engineering and technology (NAAC A++, solid NIRF/QS standing), admits most undergrads via VITEEE, and posts strong placements (often 10,000+ offers in recent years, with top packages around 1 crore INR).
Tulare Western High School
September 22, 2026
•[ ransomware, education ]
Tulare Western High School was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Education. Country: United States of America. Website: www.tjuhsd.org. Education Administration Programs Stolen data: 35 GB.
Catholic University of El Salvador
September 24, 2026
•[ ransomware, education ]
Catholic University of El Salvador was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Education. Country: El Salvador. The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.
Pajulahti
September 21, 2026
•[ ransomware, manufacturing, education ]
Pajulahti was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Finland. Website: pajulahti.com. pajulahti.com zoominfo.com/c/pajulahti/369113600 Pajulahti Sports Institute is one of Finland's oldest and largest sports institutes, founded in 1929 and located on 110 hectares by Lake Iso-Kukkanen in Nastola (Lahti), about an hour from Helsinki. It is Finland's only official Olympic and Paralympic Training Center, known for its focus on endurance sports and paralympic athletics. Since January 2025, Pajulahti has been merged with Kisakallio and the Helsinki-based Urhea campus into Kolmen kampuksen urheiluopisto the largest sports institute in Finland, with 3 campuses, ~200 employees, 73,000 m of sports facilities, 320,000 visitors per year, and ~500 students in professional sports education. The merged group generates about 26 million in annual revenue, operates on a non-profit basis (owned by foundations)
nsbsd.org
September 28, 2026
•[ ransomware, government, education ]
nsbsd.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Government & Defense. Country: United States of America. Website: nsbsd.org. North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utqiavik. It operates 11 schools across the borough, enrolling approximately 2,044 students from Pre-K through 12th grade. The district's mission is rooted in Iupiaq culture, aiming to develop students who are "empowered, culturally rooted, bilingual, healthy, critical, creative, life-long learners". For the 2025-2026 fiscal year, the district received $38,766,371 in local funding from the North Slope Borough, with per-pupil spending significantly above the national average at approximately $40,367
stjames.wa.edu.au
September 28, 2026
•[ ransomware, education ]
stjames.wa.edu.au was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Education. Country: Australia. Website: stjames.wa.edu.au. St James Anglican School provides a holistic education for students from Kindergarten to Year 12, focusing on unlocking individual potential and fostering excellence across various disciplines. The school offers a diverse curriculum that includes
AHeadStart Tutoring
September 29, 2026
•[ ransomware, education ]
AHeadStart Tutoring was listed as a victim on the leak site of the Gammax ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Education. Country: New Zealand. Website: aheadstart.co.nz. AHeadStart is a Christchurch-based tutoring company in New Zealand that provides personalized instruction for primary, secondary, and adult learners. ...
Stockham Construction
September 28, 2026
•[ ransomware, manufacturing, technology ]
Stockham Construction was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: United States of America. Website: stockhamconstruction.com. Stockham Construction, Inc. is a commercial union subcontractor with over 30 years of experience specializing in interior and exterior metal stud framing, drywall, finish taping, acoustical ceilings, and commercial door installation. The company is dedicated to quality, integrity, and client satisfaction, aiming to build lasting partnerships that contribute to the success of their clients' ventures. They serve a diverse range of commercial construction projects, including advanced technology, health services, and education sectors, ensuring high standards of quality and precision. Their collaborative approach integrates multiple trades to streamline the construction process, delivering exceptional results while minimizing disruptions.
The company headquarters is located in 475 Portal Street, Cotati, CA 94931, United States. 201-500 Employees
