lhps.org Listed by incransom Ransomware Group

On January 27, 2025, Lake Highland Preparatory School in Orlando appeared on the leak site of the ransomware group known as Incransom. The private K-12 school, which educates roughly 1,950 students from Pre-K through grade 12 across two campuses, is claimed to have had internal files exfiltrated during a ransomware attack.

Reported Details of the Breach

Public reporting indicates that Incransom listed LHPS on its disclosure page and claimed to have stolen internal documents. The school, founded in 1970, is one of the largest independent coeducational day schools in the United States and holds accreditations from the Florida Council of Independent Schools, the Southern Association of Colleges and Schools, and the Florida Kindergarten Council. No exact count of affected individuals has been released, and the precise volume or content of the stolen files remains unclear from available reporting. The incident follows the typical ransomware pattern of encryption followed by data exfiltration and extortion pressure.

Why This Matters for You and Your Family

If your child attends Lake Highland Preparatory School or any similar institution, your family’s information may now sit in an attacker’s archive. Internal files from schools routinely contain names, dates of birth, addresses, parent contact details, medical notes, and sometimes Social Security numbers for enrollment or scholarship records. Once exposed, this data does not expire. It can be sold quietly on underground forums long after headlines fade, increasing the odds that your family becomes the target of identity theft, phishing, or physical harassment. For parents, the breach represents a direct compromise of the private details you entrusted to your child’s school.

The Doxxing and Identity-Chain Risks

School records frequently link a child’s name and date of birth to parental emails, phone numbers, and home addresses. Attackers can chain this information with usernames from gaming platforms, social media handles, or previous breaches to build a complete profile. Credential leaks of this nature often cascade into account takeovers on Roblox, Minecraft, Discord, or other services popular with children. A single exposed parent email can unlock family photos, travel plans, and real-time location data, turning a data breach into sustained doxxing. Available reporting describes these identity chains as a primary method used to escalate pressure on victims or to sell “fullz” packages on criminal marketplaces.

Incransom’s Publicly Known Track Record

Public reporting attributes Incransom with emerging in late 2023 as a double-extortion ransomware operation. The group has targeted hospitals, manufacturers, and educational institutions, posting victim data on its dark-web leak site when ransom demands go unpaid. Its typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by exfiltration of sensitive files before deploying encryption. The group then issues private ransom notes with short deadlines, later publishing samples of stolen data as proof. Observers note that Incransom maintains a relatively low public profile compared with larger ransomware brands but consistently follows through on publishing victim files when payments are not made.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password used at Lake Highland Preparatory School anywhere else it is reused, and switch on two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your family’s data is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and parent credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing accounts at home.

The breach at Lake Highland Preparatory School is a reminder that any organization holding your family’s information can become the weakest link. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this incident. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information before the next criminal group puts it to use.