Eastern Townships School Board Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Residents and families connected to the Eastern Townships School Board now face the possibility that internal records held by the board have been copied by an unauthorized party. When a school board’s files are taken, the immediate concern is what personal details about students, parents, and staff may have left the organization’s control and how those details could be used.

Breaking down the breach

On December 18, 2025, the Eastern Townships School Board appeared on the leak site maintained by the group known as qilin. The listing states that internal files were removed during a ransomware incident. No figure has been released for the number of individuals affected, and the board has not confirmed the volume or specific contents of any data that may have been taken.

Inside qilin

Qilin is a ransomware-as-a-service operation that has been active since at least 2022. The group typically gains access through compromised remote-access tools or phishing, then deploys encryption while also copying selected files. It maintains a public leak site where it lists organizations that have not paid a ransom demand, posting samples or descriptions of the material it claims to hold. Listings on the site represent the group’s assertions rather than independently verified events.

Who is Eastern Townships School Board?

The Eastern Townships School Board is a public education authority serving communities in Quebec’s Eastern Townships region. Like other Canadian school boards, it maintains records on current and former students, their families, and employees. These records commonly include contact information, academic histories, health-related notes required for accommodation, and employment files. A breach at such an institution therefore touches a population that includes minors and spans multiple years of personal history.

The information in question

The only detail released so far is that “internal files” were removed. The exact categories of data have not been disclosed. Organizations of this type routinely store names, addresses, dates of birth, parent or guardian contact details, student identification numbers, attendance and grade records, and limited medical or special-needs documentation. Until the board or investigators publish a more precise inventory, the presence or absence of any particular data element remains unconfirmed.

The real-world impact

Exfiltrated school records can be used for identity-related fraud, targeted phishing, or attempts to locate individuals. For students and families, the risks are largely long-term rather than immediate. The organization itself faces costs for investigation, possible notification, and remediation of the access method used in the incident. No evidence has been made public that the data have been further distributed beyond the qilin listing.

If your data was in this claimed breach

Individuals connected to the board should monitor their email and postal addresses for unusual messages and consider placing fraud alerts with credit-reporting agencies if financial or identity documents appear to have been involved. A free exposure scan of an email address against known breach data can indicate whether the address has appeared in previously published lists, though it will not confirm presence in this specific incident until more details are released.

AICompiled with AI assistance from public sources and published under our editorial standards.