Education Data Breaches

Brazosport College experienced a data breach in August 2026, according to ransomware tracking reports.

Southern Illinois University experienced a data breach. The specifics of the incident and the affected population are currently unknown.

Battle Creek Public Schools in Nebraska was listed in a reports-only 2026 data breach entry by the Rhysida ransomware group. The listing alleges exposure of student and special-education records, but no official confirmation or affected count was identified.

Deer Creek-Mackinaw CUSD was listed in a reported 2026 data breach by ransomware.live, which identified the organization as a Dire Wolf victim on August 21, 2026. The incident has not been publicly confirmed by the district or a regulator, and affected individuals and data types remain unknown.

Merced Union High School District reported a data breach to the California Attorney General in 2026 involving an incident dated August 11, 2025. The available regulator listing does not disclose the affected count or data types.

Southeastern Oklahoma State University was listed in an unconfirmed 2026 data breach report attributed to the Interlock ransomware group. The report alleges exposure of student records, including Social Security numbers, financial aid information, and medical information, but no affected count has been disclosed.

Arizona State University (ASU) data breach reports surfaced in 2026 through a ransomware tracker entry tied to the Dire Wolf group. No official confirmation, affected count, or data types were publicly confirmed in the source provided.

Columbia University data breach in 2026 was listed by a ransomware tracker on 2026-08-14, but the incident has not been publicly confirmed in the materials provided. The available record names Columbia University Information (Dental) and does not confirm the affected count or data types.

SMAPCENTER.UAH.EDU data breach in 2026 was listed on ransomware.live, but the available source material only provides reports-only status and no public confirmation of scope.

De Colores Child Development Center Weber experienced a data security incident reported in August 2026 that may have exposed the personal information of two Texas residents.

Sciencenter, an Ithaca, New York science museum, experienced a data breach in 2026 that exposed names and additional personal information of individuals. The organization is offering complimentary credit monitoring to those affected.

EduSpa data breach in 2026 was listed on ransomware.live as a reports-only incident, with no official confirmation in the sources reviewed.

Laurel Institutes data breach in 2026 was listed by a ransomware tracker, but no public company or regulator confirmation was found. The affected count and exposed data types remain unconfirmed.

The District of Columbia Public Schools (dcps.dc.gov) experienced a data breach in July 2026, as reported by the ExfilSquad ransomware group.

Upland Unified School District experienced a data breach in July 2026, confirmed by a ransomware group listing, with internal files exfiltrated.

Highline Community College was listed on the Qilin ransomware leak site in July 2026, with the group claiming to have exfiltrated data. The certainty level is reports_only as there is no official confirmation.

The Salida Union School District experienced a data incident in July 2026, with the Qilin ransomware group claiming to have exfiltrated internal files. The district states its investigation indicates no data was accessed or extracted.

The St. Francis Xavier Catholic School System potentially experienced a data breach in July 2026, with claims of internal files being exfiltrated by the WorldLeaks ransomware group. The breach is currently unconfirmed by the school system.

The Nueva School experienced a data breach in July 2026, with the Qilin ransomware group claiming responsibility and listing the school on their leak site.

Cedar Crest College experienced a data breach in July 2026 due to a Nightspire ransomware attack, with the full scope of data exposure currently undisclosed.

A data breach potentially involving Lincoln Technical Institute was reported by the California Attorney General, but details regarding affected individuals or data types remain unconfirmed.

There is no evidence of a data breach involving Fortray in 2026. The query appears to confuse Fortray, a career training organization, with Fortra, a cybersecurity company that issued a vulnerability advisory in June 2026.