On June 10, 2026, the Global Schools Foundation appeared on the leak site of the ransomware group Fulcrumsec. The Singapore-based nonprofit, which operates a network of private international schools across Asia and the Middle East, is claimed to have had internal files exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates the foundation manages schools under brands including the Global Indian International School and follows an Indian curriculum framework. The data exposed consists of internal files; the exact volume and specific types of records remain unclear from available reporting. No confirmed victim count for individuals has been released, though the nature of an educational nonprofit suggests student, parent, staff, and alumni information could be involved. The listing on the Fulcrumsec leak site carries an implicit extortion deadline typical of ransomware operations, though no exact date has been publicly detailed beyond the initial June 10 posting.
Why This Matters for You and Your Family
When a school network is breached, the information at risk often includes names, addresses, dates of birth, contact details, medical notes, academic records, and sometimes payment information for tuition or activities. Internal files from an organization like Global Schools Foundation can contain exactly that mix of data for thousands of families. Once exposed, these details do not disappear. They circulate on underground forums and become building blocks for identity theft, phishing campaigns, and harassment that can affect your children years later. For any parent whose child attends or attended one of these schools, the breach represents a permanent increase in exposure.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one dataset. A single exposed email or phone number can be cross-referenced with gaming accounts, social-media handles, and family addresses. Attackers chain these fragments together to build full profiles. In the education sector this is especially dangerous because children’s names, school IDs, and parent contacts are often stored together. A credential leak from a parent portal can lead directly to compromise of a child’s Roblox, Minecraft, or other gaming account, which then reveals even more personal information through in-game chats and linked profiles. The result is a doxxing chain that can escalate from data exposure to real-world harassment.