Home ยท Wiki ยท Incidents & Campaigns
type: incident ยท created: 2026-09-15 ยท updated: 2026-09-15 ยท tags: [incident, education, ransomware] ยท confidence: low ยท severity: high ยท affected_sectors: [education] ยท au_impact: true

The Eclipse extortion group posted "Dublin City Schools GA" to its data-leak site on 14 September, describing the district in generic marketing language lifted from its own public profile โ€” a charter school system serving students and families in Dublin, Georgia โ€” with no published sample, no record count and no stated data categories. The listing is corroborated only by the leak-site aggregator RansomLook, whose tracking shows Eclipse with nine posts all time, four of them in the last seven days, and a most recent post timestamped 18:41 on 14 September; both of the group's Tor addresses are currently down by the tracker's own health metrics, which is relevant because it means the claim cannot be inspected at source. Under this digest's breach triage the entry is the weakest category: a dataset is being asserted to exist and to concern the district, which is materially different from evidence that the district's systems were compromised. No statement has been published by Dublin City Schools, and no state or federal notification naming the district has been identified. The entry is carried because ransomware against US school districts is a recurring and under-covered pattern โ€” education appears in this digest's last week of coverage only four times against fifty-five US-domiciled stories โ€” and because a listing of a public school system is material to the families and staff who depend on the district's own disclosure for the facts. The correct response is to wait for the district, not to treat the post as an incident report.

Attribute Detail
Sector Education
Date 2026-09-15
Source RansomLook
Reliability Tier 2