Ransomware victim disclosure
← All victimsNorthgate School District
listed as northgatesd.net · Claimed by Darkpower · listed 3 years ago
Status timeline
- Listed
Mar 11, 2023
- Data leaked
At a glance
- Group
- Darkpower
- Status
- Data leaked
- Country
- United States
- Sector
- Education
- Listed on leak site
- Mar 11, 2023
About the victim
AI dossier — public-source company profileNorthgate School District is a public K-12 school district located in the Boroughs of Avalon and Bellevue, approximately 7.5 miles northwest of downtown Pittsburgh, Pennsylvania, serving a community of just over 13,000 residents. The district operates four schools across three buildings — Avalon Elementary, Bellevue Elementary, Northgate Middle School, and Northgate High School — and employs 99 full-time teachers alongside qualified support staff. The district offers a range of academic programs including career education, online learning, and arts programs.
- Industry
- K-12 Public Education
- Address
- Avalon and Bellevue Boroughs, approximately 7.5 miles northwest of downtown Pittsburgh, Pennsylvania, United States
- Employees
- 99 full-time teachers plus support staff (est. 150-299 total)
Attack summary
Severity: high — The disclosed status is 'data_published,' indicating data was exfiltrated and released. As a K-12 school district, the data almost certainly includes minor students' PII, potentially health/special education records protected under FERPA and HIPAA, which constitutes sensitive regulated data at meaningful scale.The Darkpower ransomware group claims an attack on Northgate School District with a disclosed status of 'data_published,' indicating exfiltration and/or publication of data. No leak post details, ransom demand, or specific data volume were captured.
Data the group says was taken
AI dossier — extracted from the leak post- Student records (likely)
- Staff personnel records (likely)
- Financial and operations data (likely)
- Health and wellness records (likely)
- Special services / IEP records (likely)
Sources
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
