On July 18, 2026, the Qilin ransomware group listed The Nueva School on their leak site, claiming to have exfiltrated internal files. There is no official statement from The Nueva School, nor has a breach notification letter been issued to the public or affected individuals.
The specific types of data exposed, such as Social Security numbers, medical data, or disciplinary records, are not yet confirmed by The Nueva School, although internal files are frequently exfiltrated in such attacks. The number of individuals affected also remains unquantified by the ransomware group. As of July 19, 2026, no state Attorney General filing has been reported in California, where the school is located.
This is a developing incident, and official notifications, legal filings, and forensic reports are expected in the coming days or weeks. The full scope of the data exposure remains unverified until The Nueva School releases an official statement or forensic report.