Kearney Public Schools
Attack Intelligence
Kearney Public Schools was compromised in a ransomware attack attributed to interlock in October 2025. The organization, operating in the Education sector in United States, was added to the group's data leak site as part of an extortion campaign.
interlock operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Kearney Public Schools is a school district comprised of 18 schools of various ages! This school has significant financial and other resources and the ability to protect itself and its students! However, it chose a poor path and is now paying for its irresponsibility! A large amount of confidential and classified information of various kinds was leaked into the public domain! This included personal security data, financial documents, and even information belonging to third parties, such as students' relatives and parents.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-20131, which may have been leveraged as initial access vectors or for lateral movement.