Education Data Breaches

Edgewood Independent School District (ISD) reported a data breach to the Texas Attorney General on October 6, 2026, which impacted approximately 3,000 Texans.

SMAPCENTER-UAH.EDU was listed by a ransomware tracker as a possible data breach victim on September 23, 2026; no official confirmation or details about exposed data have been found.

Tulare Western High School was listed in a reports-only 2026 data breach attributed to the Booba Project. Ransomware.live reported that 35 GB of data was stolen, but the affected individual count and data types have not been publicly confirmed.

LeTourneau University reported a 2026 data breach affecting approximately 1,072 individuals to the Texas Attorney General. The reported information included names and financial account information, while the incident date and cause remain undisclosed.

Kendall Hunt Publishing was listed in a reported 2026 data breach by the Incransom ransomware group on September 18, 2026. The report does not confirm the number of affected individuals or the types of data involved.

The United Federation of Teachers was listed in a reports-only 2026 data breach claim by the N0n ransomware group. The report alleged access to union legal, personnel, labor-contract, and health-benefit-fund case materials, but no official confirmation or affected-person count was available.

Odyssey Charter School, Inc. was listed in a reports-only 2026 data breach entry by Ransomware.live after a reported Wallstreet ransomware attack dated September 16, 2026. The affected individual count and exposed data types have not been publicly confirmed.

Springfield Public Schools was listed in a 2026 data breach report by Ransomware.live after an alleged September 15, 2026 attack attributed to Interlock. The report has not been independently confirmed by the district or a regulator, and the affected count and data types remain unknown.

Dublin City Schools reported data breach information has not been officially confirmed for 2026. Ransomware.live listed the Georgia school system as a reported Eclipse victim on September 14, 2026, but did not provide an affected count or data types.

Sutton Public Schools was listed in a ransomware tracker as experiencing a reported data breach on September 12, 2026. The report has not been officially confirmed, and the affected count and data types remain unknown.

California School Employees Association was listed in a 2026 data breach report by ransomware.live. The incident remains unconfirmed by the company or a government regulator, and the affected data and number of individuals are unknown.

Alaska Electrical Apprenticeship was listed in a reported data breach on September 8, 2026. Ransomware.live attributed the reported attack to the Qilin group, but no official confirmation or affected-data details were available.

The University of San Francisco was listed in a ransomware-tracker report as the target of a suspected 2026 data breach on September 7, 2026. The report does not confirm the affected individual count or the types of data involved.

Sudbury Extended Day, a Massachusetts childcare provider, disclosed in September 2026 that a family's personal information was mistakenly shared with unauthorized individuals in August 2026.

Spirit Cultural Exchange was listed in a reported 2026 data breach by Ransomware.live, which attributed the alleged attack to the Kazu group. The incident and any exposed information have not been publicly confirmed by the company in the available sources.

Uak University experienced a data breach in September 2026, reportedly due to the Qilin ransomware group.

The Westfield Public School District reportedly experienced a data breach in September 2026.

Bennett College experienced a data breach, which was reported to the California Attorney General, though details regarding the incident are not yet publicly available.

Total Education Solutions experienced a data breach in September 2026, as reported by the Wallstreet ransomware group.

Bethel Classical Academy reportedly experienced a data breach in late August 2026, discovered by the Lockbit5 ransomware group.

Brazosport College experienced a data breach in August 2026, according to ransomware tracking reports.

Southern Illinois University experienced a data breach. The specifics of the incident and the affected population are currently unknown.

Battle Creek Public Schools in Nebraska was listed in a reports-only 2026 data breach entry by the Rhysida ransomware group. The listing alleges exposure of student and special-education records, but no official confirmation or affected count was identified.