Richmont Graduate University Listed by AiLock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On July 7, 2026, the ransomware group AiLock listed Richmont Graduate University on its site and claimed to have obtained internal files from the institution. The number of people affected has not been reported, and no further details about the timing or method of the incident have been made public. This listing means that any personal or academic records held by the university could now circulate beyond its control, affecting students, alumni, faculty, and staff who entrusted the institution with their information.

Breaking down the breach

The only confirmed public information is the July 7, 2026 listing by AiLock and the statement that internal files were allegedly exfiltrated during a ransomware attack. No figure for the volume of data, the number of individuals involved, or the date of the underlying intrusion has been released. It remains unconfirmed whether the university has acknowledged the incident or whether any data has been published.

Who is AiLock?

AiLock is a ransomware operator that lists victim organizations on its leak site after claiming to have stolen data during encryption attacks. Such groups commonly combine file encryption with the threat of data release to pressure targets. The listing of Richmont Graduate University constitutes the group’s claim; independent confirmation of the data’s authenticity or scope has not been provided.

About Richmont Graduate University

Richmont Graduate University is a private Christian institution that offers master’s-level programs in counseling and ministry, delivered both online and on physical campuses. Organizations of this type routinely collect and store application materials, academic transcripts, financial-aid records, and limited personal identifiers for students and employees. A compromise at such an institution can therefore touch individuals whose records extend back many years.

What was likely exposed

The only data category named in connection with the listing is “internal files.” The precise contents of those files have not been disclosed. Institutions in higher education typically maintain student directories, enrollment data, financial information, and correspondence; however, whether any of these categories were actually taken remains unconfirmed.

What's at stake

Exposed internal files could contain personal details that enable targeted phishing, account takeovers, or identity misuse for affected individuals. For the university, the incident may prompt regulatory review, added security costs, and loss of trust among applicants and donors. The absence of a confirmed data volume leaves the full extent of these risks unknown.

Were you affected?

Begin by monitoring official statements from Richmont Graduate University for any guidance on the incident. Change passwords for any accounts linked to the university and enable multi-factor authentication where available. Individuals can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.