Kearney Public Schools targeted by interlock ransomware group
Kearney Public Schools has been listed on a leak site by the threat actor known as interlock. The group claims that various confidential data belonging to the institution has been compromised.
- Published
- 3 min read
- 3 min read
- Ransomware group: interlock
- Country: United States
- Sector: Education
- Announcement date: October 15, 2025
The alleged attack and group claims
According to the announcement published by the interlock group on October 15, 2025, the institution's security measures were insufficient to prevent the intrusion. The threat actor alleges that both corporate and personal data have been leaked as a result of this security failure. While the specific method of entry was not detailed, the group's claim focuses on the vulnerability of the organization's existing defenses.
The group provided a screenshot as evidence of the breach, which displays a directory structure. This directory structure indicates that the stolen data is organized into various categories. Based on the visual evidence provided by the attackers, the total size of the data involved in this alleged leak is approximately 288 GB. No information was provided regarding the specific ransom demand or the exact file count within the directories.
Data categories and affected information
The information allegedly stolen by the interlock group is extensive, covering multiple administrative and personal domains. Based on the screenshots provided by the threat actor, the data includes various categories such as backups, staff files, department records, and client files. The group claims that the breach encompasses a wide range of sensitive information that could impact various stakeholders within the school district.
The specific types of data claimed to be included in the leak are:
- Personal security data
- Financial documents
- Staff records
- Information belonging to students' relatives
The exposure of such diverse data types highlights the potential impact of ransomware attacks on educational institutions, where sensitive personal and financial records are stored alongside academic information.
Organization profile
Kearney Public Schools is a public school district located in the state of Nebraska, United States. The district operates 18 schools serving students of various age groups.
Analysis and implications for the education sector
This alleged leak may pose a significant risk to the protection of sensitive data within educational institutions. The exposure of student and staff information could lead to various secondary risks, such as identity theft and targeted phishing attacks. Because the data includes information belonging to students' relatives, the scope of potential harm extends beyond the immediate school population.
As the institution operates in the United States, the incident may trigger legal processes under regulations designed to protect educational data, such as the Family Educational Rights and Privacy Act (FERPA). Such regulations are designed to ensure the privacy of student education records and impose strict requirements on how that data is handled and protected.
Public information regarding the interlock group remains limited; however, their ransomware methods may negatively impact the operational continuity and reputation of the institution. In the broader context of cyber threats, ransomware groups often utilize double extortion tactics, where they not only encrypt an organization's data but also threaten to leak sensitive information on public forums to increase pressure on the victim.
For organizations in the education sector, defending against such threats requires robust security postures. Common defensive steps often include maintaining offline backups, implementing multi-factor authentication, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors. Protecting the privacy of students, staff, and their families remains a critical priority for school districts facing an evolving threat landscape.