Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

nsbsd.org

nsbsd.org
Group Incransom
Discovered 2026-09-28 00:34 UTC
Est. attack date 2026-09-28
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utqiaġvik. It operates 11 schools across the borough, enrolling approximately 2,044 students from Pre-K through 12th grade. The district's mission is rooted in Iñupiaq culture, aiming to develop students who are "empowered, culturally rooted, bilingual, healthy, critical, creative, life-long learners". For the 2025-2026 fiscal year, the district received $38,766,371 in local funding from the North Slope Borough, with per-pupil spending significantly above the national average at approximately $40,367
Infostealer activity detected by HudsonRock

Compromised Employees: 8

Compromised Users: 0

Third Party Employee Credentials: 9

External Attack Surface: 11

Exposure Report
by ParanoidLab
3031
Passwords
158 critical
0
Cookies
0 critical
Last queried 2026-09-28 00:34 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • nsbsd-org.mail.protection.outlook.com. Microsoft 365
TXT Records
  • to1nPn0MrTwpH8Se3Iz8fA==
  • fd9f7486-e688-4882-8c36-b2c6a0cc611c
  • openai-domain-verification=dv-7R1fkebFS9e7FMEstWGchmQi
  • jamf-site-verification=pjvbnpnVcgzr2rdYsACDxw
  • openai-domain-verification=dv-WAtzmhDssPQMyHqkkFrm5jwz
  • google-site-verification=er3Bm3crNp_UZHO_tovXnU5wI4cN3_5Mf_-vcUlzbv4
  • v=spf1 include:13ut2lot5.spf.checkpoint-spf.com include:spf.protection.outlook.com include:customerspf.schoolmessenger.com include:spfa.cpmails.com -all
  • cisco-ci-domain-verification=1f1302235ef048bf9df64f41ba219132898a3b81e5c3b8d48cfa95aad6039254
  • adobe-idp-site-verification=2e527a139c0e089f4027404e4f106d9ebaecde25b4bc26787644451b2e6d7a1d
Cloud / SaaS Services Detected
Adobe Cisco JamF OpenIA

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.