Threat Intelligence

ThreeAM Claims Australian Education Firm St James' Anglican School on Its Leak Site

ransomware.live · 29 Sept 2026

Key Takeaway Australian schools and education providers should ensure strong data protection, regular backups and a tested incident response plan, since ransomware groups frequently target the sector regardless of whether specific claims are verified.

The ransomware group ThreeAM has added St James' Anglican School, a Western Australian school offering education from Kindergarten to Year 12, to its dark web leak site. This claim comes from a public tracker, ransomware.live, which monitors ransomware leak sites. It is important to note that these claims are made by criminal groups and have not been independently verified. Ransomware groups sometimes list organisations they have not actually breached, or do so during ongoing negotiations, and details can be inaccurate.

At this stage, St James' Anglican School has not confirmed any cybersecurity incident. Education providers, which hold sensitive data on students, families and staff, remain attractive targets for ransomware groups due to the volume of personal information they manage and often limited cybersecurity resources compared to larger organisations.

Australian schools and education providers should treat this as a reminder to review their cybersecurity posture, particularly around data protection and incident response readiness.

ransomware dark web leak site threeam Education

Summarised by CISO AI from ransomware.live. We link back to every original so you can read it yourself.