delano.k12.mn.us Listed by lockbit5 Ransomware Group

On May 19, 2026, Delano Public Schools in Minnesota appeared on the LockBit 5 ransomware group's leak site after attackers exfiltrated internal files during a ransomware incident.

What Public Reporting Shows

Public reporting indicates the school district's domain delano.k12.mn.us was listed on the LockBit 5 leak site hosted on the dark web. The group claims to have stolen internal files, though the exact number of affected individuals remains unknown. Available reporting describes the data as internal files rather than a specific list of student or employee records. The listing appeared on May 19, 2026, consistent with the group's typical practice of publishing victim data when ransom demands go unmet.

LockBit 5 posted proof of the exfiltration on their leak site, a Tor-hosted onion address tracked by ransomware monitoring services. No precise volume of records has been publicly detailed, but the incident follows the pattern of ransomware operators targeting school districts that hold sensitive information about children, staff, and families.

Why This Matters for You and Your Family

When a school district like Delano Public Schools suffers a breach, the people most exposed are local families. Student records, parent contact details, employee information, and internal documents can contain names, addresses, dates of birth, and sometimes Social Security numbers. Once that information leaves the school's control, it can surface in unexpected places. Children’s data is especially valuable to criminals because young identities can be used for years to open fraudulent accounts or build synthetic identities.