On February 11, 2025, the Chilean school Saint George's College appeared on the leak site of the fog ransomware group after attackers exfiltrated roughly 5 GB of internal files. The incident affects current and former students, parents, staff, and anyone whose personal information was stored in the school's administrative systems.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates that fog listed Saint George's College (saintgeorge.cl) on its dark-web leak portal and published a sample of the stolen data. The exposed material consists of internal files totaling approximately 5 GB. No precise victim count has been released, but the nature of a private school's records suggests the breach includes names, contact details, identification numbers, and possibly financial or health information belonging to families.
The school has not yet issued a public statement detailing the timeline of the intrusion or the exact categories of data taken. Available reporting describes the incident as a classic ransomware attack involving both encryption and data exfiltration.
Why This Matters for You and Your Family
When a school you or your children attend suffers a breach, the information that leaks often includes details that feel deeply personal. Names, addresses, phone numbers, dates of birth, and student IDs can be combined with data from other breaches to build a complete profile of your household. Once that profile exists, it becomes easier for criminals to attempt identity theft, phishing campaigns, or even physical intimidation.