Westlake Christian Academy targeted in data leak by interlock

• Ransomware group: interlock
• Country: United States
• Sector: Education
• Announcement date: January 7, 2026

The interlock ransomware group has listed Westlake Christian Academy in a recent data leak announcement. According to the claims made by the threat actors, the group has successfully obtained sensitive information belonging to both students and staff members at the institution.

Details of the alleged attack

On January 7, 2026, the group known as interlock posted an announcement on its leak site regarding data allegedly belonging to Westlake Christian Academy. The group claims to have gained unauthorized access to the institution's database, which has resulted in the exposure of various datasets. Specifically, the threat actors claim to have leaked student lists along with various staff information.

Evidence provided by the group includes a shared screenshot that appears to show a directory structure from the compromised environment. This directory contains several folders labeled administration, development, faculty shared, operations, and student shared, suggesting a wide-reaching access to the organization's internal file systems.

Alleged data types and content

The data claimed to have been exfiltrated by interlock is substantial in scope. The group alleges that the stolen information includes a variety of sensitive files and records necessary for the school's operations. The content of the alleged leak includes the following:

• Student information
• Staff data
• Administrative documents
• Financial backups

The group's claims suggest that the breach involves not only personal identifiers but also critical operational and financial data, such as QuickBooks backups and various administrative and operational records.

About Westlake Christian Academy

Westlake Christian Academy is a private Christian school located in Grayslake, Illinois, United States. The institution provides educational services to students within the region.

Risk assessment and industry implications

This incident may pose a high risk due to the exposure of sensitive student and staff data held by an educational institution. Because the institution is based in the United States, a potential data breach of this nature could lead to significant legal consequences under the Family Educational Rights and Privacy Act (FERPA) and various state-level data protection laws. The exposure of such information often leads to secondary risks, such as identity theft or targeted phishing attacks directed at the students and staff members involved.

Furthermore, the institution may face negative impacts regarding its operational continuity and its overall reputation. In such incidents, the leaked data can be used by malicious actors to conduct further social engineering attacks. While information about the interlock group remains limited, the nature of the claim highlights the ongoing threat posed to educational institutions.

In general, ransomware attacks often utilize a