93← Home

Russian hacker group claims to have posted B.C. school district information on dark web

Headline from CBC · compiled from 3 sources

Our analysis · checked against 14 sources

Ransomware group Qilin posts files it says came from Burnaby School District

Burnaby School District confirmed on Oct. 14 that a September ransomware attack stole personal data on students, parents and staff; it has not said how many people were affected. Qilin, a Russia-linked criminal group, posted files it says came from the district, which now says data "may have been published" while an external expert checks.

The framing"Russian hacker group" does reflect Russian-language code, Russian-language recruiting forums and the arrest of a 28-year-old Russian national. But no formal government attribution has been issued, and Qilin rents its tools to criminal affiliates "anywhere in the world."

What the headline leaves out

  • The district itself confirmed on Oct. 14 that files with student, parent and staff data were stolen; only the dark-web posting is unverified.
  • No count of affected people has been released; the district says some records were hit in "a limited and smaller number of cases."
  • Qilin is a criminal rent-a-ransomware service, not a state agency.
  • A second B.C. district, Central Okanagan, was also breached.

What happens next

No dated next step has been announced; the district says personal information "may have been published," is offering credit monitoring, and its external expert has not reported a finding, while the RCMP investigation continues. BreachNews and Barracuda analysis say one arrest is unlikely to stop Qilin, given its affiliate model. Watch for the expert's verification result and any count of affected people.

Possible knock-on effects
  • Posted names, birth dates, education numbers and residency documents could be used for identity fraud, so families may register fraud alerts or credit monitoring, which matters most to parents of affected students. (official assessment: The district offered TransUnion Fraud Alert registration to staff and students and has since announced credit monitoring for affected students, families and staff.. Watch for: Reports of fraud tied to the leaked data, or district figures on fraud-alert and credit-monitoring uptake.)
  • The German arrest may not halt Qilin because affiliates carry out the intrusions, so B.C. schools could remain targets. (named expert: BreachNews and Barracuda analysis say a single-member arrest is unlikely to stop the affiliate-based group.. Watch for: New Qilin leak-site postings naming Canadian schools or public bodies after October 2026.)

Sources: CBC: Qilin posts Burnaby school district data, Burnaby Schools: Incident impacting operations (primary), Yahoo News Canada: Burnaby School District confirms student data may be published, Ransomware.live: Burnaby Schools claimed by Qilin, CP24: Personal information stolen in Burnaby cyberattack, Europe Says: Burnaby files on Qilin site, Cybersecurity Canada: Burnaby breach, CBC: Central Okanagan breach and commissioner comments, Adaptive Security: Qilin ransomware, CybelAngel: Qilin tactics, SecurityWeek: Qilin suspect extradited to Germany, BreachNews: Qilin, Aviatrix: Germany arrests Qilin member, Barracuda: One Qilin suspect in custody

Written in our own words from the sources above, and checked claim by claim before it was published. The report below says only what each outlet said.

The report: what outlets said

CBC News reports it has discovered a hacked database stolen from the Burnaby School District on a dark web site run by a prominent shadowy ransomware group believed to be operating out of Russia.[1]

According to the school district, hackers gained access to the district's systems on Sept. 21.[1] CBC reports that the perpetrators appear to have started posting information online almost immediately.[1] 14 confirming that "files taken containing personal information were copied and stolen by the criminal parties responsible for the attack."[1] CBC reports that the district warned parents in an email Tuesday that "the threat actor claims to have published files and information from this incident on the dark web."[1]According to CBC, the site belongs to Qilin, a Russia-linked group that provides hackers with online tools in exchange for a cut of ransomware profits.[1]CBC reports that, according to the screenshots posted online, the files contain a terabyte worth of data and have allegedly been seen nearly 4,000 times since they were first posted publicly on Oct. 15.[2] CBC says the screenshots show folders labelled "Harassment Investigations," "Discipline," "Payroll" and "Mental health and Wellness."[2]According to CBC, the files contain medical information, detailed learning assessments and personal information about both staff and students.[1] CBC says it has not downloaded the contents of the files themselves[1].Headtopics reports that Burnaby School District officials have engaged an external cybersecurity expert to verify the authenticity of the leaked data[3].CBC also reports that just last month, Japanese authorities handed over a Russian national accused of being involved with Qilin in connection with a European ransomware attack to German authorities.[1]

Listen to the songIT Security News — November 06, 2026

Sources

  1. [1]Russian hacker group claims to have posted B.C. school district information on dark web | CBC News
  2. [2]Russian hacker group claims to have posted B.C. school district information on dark web - United States
  3. [3]Qilin Ransomware Group Exposes Burnaby School District Data on Dark Web | Crime

Every sentence here reports what a named outlet said, with a link to it. Compiled by 93 from the reporting below.

This topic, day by day

Russian hacker group claims to have posted B.C. school district information on dark web | 93