Skip to content
Leak-site post naming Seminole Schools, captured by ThreatCluster

Seminole Schools

global secret group

Ransomware leak-site victim intelligence · EN

Data size
39.6 GB
Files
54,468
Posted
Oct 19, 2026
Country
United States
Industry
Education General, Education

Summary

Written by ThreatClusterfrom victim profile, leak post

The group claims to have exfiltrated 39.6 GB of data from Seminole Schools (domain internal.seminole.org), a United States education sector victim. The leak post is published. They state the data includes HR and recruitment records, internal documentation and source code.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Revenue
$15.5 Million
Employees
50
Domains
internal.seminole.org sps.k12.ok.us

What was taken

K-12 school district in Seminole County, Florida, USA.

Leak-site images (7)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Document titled "DOAA CONFIDENTIALITY AGREEMENT" outlining data confidentiality terms, including types of data and obligations of the parties involved.
onion leak page267 KB
Surveillance image of an empty reception area with a desk, chair, and some office supplies, showing a timestamp in the corner.
onion leak page535 KB
Screenshot of a virtual machine management interface displaying multiple virtual machines with details such as name, status, and configuration.
onion leak page261 KB
The image contains a screenshot of a Google Password Manager interface alongside a large block of text with what appears to be encoded data or credentials.
onion leak page296 KB
Screenshot of a financial spreadsheet showing budgeted and actual expenditures, fund balances, and a note regarding funding requests.
onion leak page250 KB
The image contains a local business tax receipt from Panama City Beach, a Georgia driver's license, and an insurance policy card.
onion leak page265 KB