Qilin Claims Ransomware Attack on Mecklenburg Schools

A ransomware attack claimed by the Qilin group disrupted Mecklenburg County Public Schools in early September 2025, reportedly stealing 305 GB of sensitive data (financial records, grant documents, budgets and children’s medical files) and forcing classrooms offline; Qilin published sample files and the district is investigating without intending to pay the ransom. The report places this incident within a broader 2025 surge of Qilin activity and ransomware targeting educational institutions, noting phishing as the primary spread method and highlighting operational and data-exposure impacts to schools.