The North Stonington School District in the US fell victim to the interlock ransomware attack, resulting in the exposure of over 3 TB of confidential student data. Despite a “Safety First” motto, the district’s inadequate IT security allowed attackers to access and seize comprehensive records, compromising the safety and privacy of their students. #UnitedStates
Incident Details
- Victim: The North Stonington School District
- Country: US
- Actor: interlock
- Source: http://sogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onion/index.php?p=
- Discovered: 2025-10-15 10:23:15.541013
- Published: 2025-10-15 10:22:58.400685
Information
- The North Stonington School District experienced a ransomware attack carried out by the actor Interlock.
- The district operates two public schools with a total of 736 students.
- The schools aim to maintain a safe environment for students, staff, and the community, although their perceived “Safety First” slogan has recently been revised.
- Despite substantial resources and support, the district’s IT security team is considered to be highly ineffective.
- As a result of the breach, over 3 terabytes of confidential data, including all student records, history, and documentation, were exposed and are now in the possession of the attackers.

Disclaimer: This post is based on public claims made by the ransomware group "interlock". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.