June 2026 international schools crisis: The FulcrumSec extortion group breached Global Schools Group (GSG), operator of 12 K-12 brands and 60+ campuses from Singapore and India to the UAE and UK. DataBreaches.net and FulcrumSec's own statistical analysis describe one of the largest education-sector exposures of the year—centered on children's and family data.
Scale of the breach
FulcrumSec told DataBreaches that all brands share a single centralized database under GSG's AWS account. Part 1 of their June 18 analysis cited:
- 83,132 student accounts
- 88,856 parent accounts
- 11,176 staff/teacher/admin accounts
- 183,164 total unique database rows (individuals may hold multiple campus accounts)
- 35,938 detailed enrollment records with passport numbers and government IDs
- 9.4 million archived internal messages (2006–2024)
- 112 CodeCommit repositories and 168 AWS Secrets Manager entries
Brands named in reporting include GIIS, OWIS, Glendale Academy, Harrods-branded schools, Dwight Seoul, and others across Asia, the Middle East, and Europe.
Court intervention
On June 19, 2026 the Bombay High Court issued an interim injunction after GSG affiliate Pratiksha Foundation Charitable Trust sought to block FulcrumSec from leaking children's sensitive data. Court filings cited mental-health details, daily movement patterns, and parents' occupations and incomes. FulcrumSec had demanded a $750,000 ransom and allegedly emailed at least one parent with details about their children on June 10.
What parents and staff should do
- Watch for official communications from your campus brand—not ransom emails or leak downloads.
- Be alert to spear-phishing using real student names, grades, or medical context.
- Report suspicious contact citing school records to campus IT and local regulators.
- Assume passport/ID numbers in enrollment records may require monitoring if your family is in scope.
GSG had not issued a conventional corporate breach notice at initial reporting; BreachHistory tracks FulcrumSec-provided counts with court attestation that sensitive children's data was stolen.
Canonical record: Global Schools Group 2026 on BreachHistory.
Sources: DataBreaches.net Part 1, Bombay High Court coverage, LiveLaw