2026 Global Schools Group — FulcrumSec extortion; 183K+ school accounts (children's PII)

In June 2026 the FulcrumSec extortion group breached Global Schools Group (GSG), a multinational K-12 operator with 12 brands and 60+ campuses across India, Malaysia, Singapore, the UAE, the UK, and other countries. DataBreaches.net reported the incident June 12 after FulcrumSec leaked data and demanded ransom; GSG affiliates Pratiksha Foundation Charitable Trust and Witty Education sought legal action. FulcrumSec provided DataBreaches a statistical breakdown (Parts 1–2, June 18) citing 83,132 student accounts, 88,856 parent accounts, and 11,176 staff rows in a centralized ICSAllUsers database—183,164 unique database rows total, plus 35,938 detailed enrollment records with passport numbers and government IDs, 9.4 million archived internal messages, 112 CodeCommit repos, and 168 AWS secrets. On June 19 the Bombay High Court issued an interim injunction restraining FulcrumSec from leaking children's sensitive data, including mental-health details and daily movements, after a $750,000 ransom demand. GSG had not issued a conventional corporate breach notice at initial reporting; unique-individual counts may be lower than row totals where users hold multiple campus accounts.