ENKA Schools listed on Doommageddon leak site

• Ransomware group: Doommageddon
• Country: Türkiye
• Sector: Education
• Announcement date: October 5, 2026

Doommageddon claims data breach at ENKA Schools

The threat actor known as Doommageddon has listed ENKA Schools on its leak site, alleging that a data breach has occurred. This announcement, published on October 5, 2026, suggests that the institution is the target of a cyberattack. While the listing confirms the claim of a breach, the specific details regarding the extent of the incident remain limited to the group's announcement.

Details of the alleged attack

According to the announcement made by Doommageddon, the group claims to have successfully gained access to the internal systems of ENKA Schools. The listing indicates that the institution is subject to a deadline of October 15, 2026. The threat actor has signaled that the stolen data may be published if their demands are not met. At this stage, public information regarding the specific tactics, techniques, or procedures used by Doommageddon is limited, as very little is known about this particular group's operations.

Ransomware groups often utilize leak sites to exert pressure on their victims. These sites serve as a public platform where attackers post names of organizations they have compromised. This tactic is frequently part of a broader strategy known as double extortion. In a double extortion scenario, attackers do not just encrypt an organization's data to disrupt operations; they also steal sensitive information and threaten to leak it publicly to increase the pressure to pay the ransom. By threatening to release data, the attackers aim to cause reputational damage and legal consequences for the victim.

Data involved in the claim

The nature of the allegedly leaked data has not yet been disclosed by the threat actor. The listing does not specify the types of files or the volume of information that has been compromised.

About ENKA Schools

ENKA Schools is a well-established private educational institution based in Istanbul, providing education from kindergarten to high school. Operating under the ENKA Foundation, the school offers an educational model focused on academic achievement and social development.

Implications and potential risks for the sector

This claim suggests that student and staff data within the institution may be at risk. In the education sector, such breaches are particularly sensitive due to the high volume of personal information held by institutions. If the data is leaked, secondary risks such as identity theft or targeted phishing attacks may be observed. Attackers often use stolen credentials or personal details to conduct more sophisticated social engineering campaigns against individuals or the organization itself.

Furthermore, breaches targeting educational institutions could trigger legal processes regarding data protection obligations under local regulations, such as the KVKK. Organizations facing such threats may need to review their system security and evaluate potential data breach notification obligations. Common defensive steps for organizations in this sector include implementing robust access controls, maintaining regular offline backups, and conducting thorough security audits to identify vulnerabilities before they can be exploited by threat actors.