Interlock Ransomware Group Claims Attack on Community College of Beaver County
In March 2026, the cybercriminal group Interlock took responsibility for a ransomware attack on Community College of Beaver County (CCBC), a public institution in Pennsylvania serving over 7,000 students. The attack, disclosed by CCBC on March 9, 2026, encrypted critical data and disrupted access to grades, transcripts, and financial records. The college temporarily closed its campus, with in-person classes resuming only on March 30.
Interlock, which operates a data leak site, claimed to have stolen 780 GB of data, including personal records, financial documents, and contracts, which it threatened to release publicly. While the group has asserted responsibility, CCBC has not confirmed Interlock’s involvement, and key details such as the ransom demand, payment status, and breach method remain undisclosed. The college is conducting an investigation to determine the full scope of the incident.
About Interlock
First active in October 2024, Interlock is a ransomware operation that both encrypts systems and exfiltrates data, demanding payment for decryption and deletion of stolen files. Since its emergence, the group has claimed 98 attacks, with 47 confirmed by victims. Of those, 15 targeted educational institutions, highlighting a growing trend of ransomware threats against schools.
Ransomware Surge in U.S. Education
The CCBC attack is part of a broader wave of ransomware incidents affecting U.S. schools in 2026. Other recent victims include:
- Denmark School District (WI) – January 2026 (Inc ransomware)
- Alcorn School District (MS) – March 2026 (LockBit)
- Lehigh Carbon Community College (PA) – March 2026 (Medusa)
- Monmouth University (NJ) – March 2026 (PEAR)
- Alamo Heights ISD (TX) – March 2026
Such attacks can cripple operations, leading to prolonged downtime, data loss, and heightened fraud risks for students and staff. Schools that refuse to pay may face extended disruptions, though compliance with ransom demands does not guarantee data recovery or attacker silence.
Source: https://www.comparitech.com/news/cybercriminals-say-they-hacked-community-college-of-beaver-county/
Lehigh Carbon Community College cybersecurity rating report: https://www.rankiteo.com/company/lehigh-carbon-community-college
Alamo Colleges District cybersecurity rating report: https://www.rankiteo.com/company/alamo-colleges
South Washington County Schools cybersecurity rating report: https://www.rankiteo.com/company/sowashcoschools
"id": "LEHALASOW1775500819",
"linkid": "lehigh-carbon-community-college, alamo-colleges, sowashcoschools",
"type": "Ransomware",
"date": "3/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '7,000+ students and staff',
'industry': 'Education',
'location': 'Pennsylvania, USA',
'name': 'Community College of Beaver County (CCBC)',
'size': '7,000+ students',
'type': 'Educational Institution'}],
'data_breach': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal records',
'Financial documents',
'Contracts']},
'date_detected': '2026-03-09',
'date_publicly_disclosed': '2026-03-09',
'date_resolved': '2026-03-30',
'description': 'In March 2026, the cybercriminal group Interlock took '
'responsibility for a ransomware attack on Community College '
'of Beaver County (CCBC), encrypting critical data and '
'disrupting access to grades, transcripts, and financial '
'records. The college temporarily closed its campus, with '
'in-person classes resuming on March 30. Interlock claimed to '
'have stolen 780 GB of data, including personal records, '
'financial documents, and contracts, threatening to release it '
'publicly.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': '780 GB',
'downtime': '21 days',
'identity_theft_risk': 'High',
'operational_impact': 'Campus closure, disrupted classes',
'payment_information_risk': 'High',
'systems_affected': 'Grades, transcripts, financial records'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain, data exfiltration',
'ransomware': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'ransomware_strain': 'Interlock'},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'recovery_measures': 'Campus reopened, classes resumed'},
'threat_actor': 'Interlock',
'title': 'Interlock Ransomware Attack on Community College of Beaver County',
'type': 'Ransomware'}