Manitoba news: A ransomware group claims it stole student and staff data from Garden Valley School Division, and parents in the Winkler area deserve clear answers, because the division has not publicly confirmed the claim and the group’s own listing carries no verified proof.
The Interlock ransomware group listed Garden Valley School Division on its leak site on November 11, 2026, claiming it stole confidential student, staff and health information. The claim has not been verified, and the division has not publicly confirmed it. The division had network disruptions on October 25 that it later called a cybersecurity incident.
By Maplestime News Desk | Winnipeg, Manitoba | November 12, 2026
Sources: DeXpose, Ransomware.live, HookPhish | Last updated: November 12, 2026
Key Takeaways
- Interlock listed Garden Valley School Division on its leak site on November 11, 2026, claiming a cyberattack.
- The group claims it took data on about 4,300 students, including names, birth dates, grades, attendance and special education records.
- The group also claims it took employee payroll records, bank account information, personnel files and accounting records.
- Breachsense records a claimed leak size of 1.48 TB and notes the claims have not been verified.
- The division had network disruptions on October 25, took systems offline, and on October 30 called it a cybersecurity incident.
- No public statement from the division confirms the Interlock claim.
What does the group claim it took from Garden Valley School Division?
According to the listing, the group claims it compromised confidential student, staff and health information. The claimed haul includes student information system databases with names, dates of birth, grades, attendance, disciplinary records and special education records, plus employee payroll records and bank account information, personnel files, accounting spreadsheets and administrative records.
The group’s statement says the alleged breach “will result in a FIPPA/PHIA, notification to affected individuals, and potential penalties,” referring to Manitoba privacy laws. That is the group’s own claim, not a finding by the division or by any regulator.
Multiple ransomware trackers recorded the November 11 listing, including DeXpose, Ransomware.live, HookPhish, Cyber Threat Intelligence and Malware.news. But trackers record the claim itself, and at least one tracker notes that no verified evidence of disruption, encryption or theft has been provided.
Related: Union Cries Foul Over Simmering Labour Dispute With Lord Selkirk School Division
What happened on October 25?
The claim lands against a real incident, and that is what makes it hard for families to dismiss. The division had network disruptions on October 25, took systems offline, and on October 30 attributed the trouble to a cybersecurity incident. Superintendent Dan Ward said phones were restored quickly.
The division has been assessing whether data was compromised and has said it would notify affected people if it was. That assessment, and the October 25 incident, are the confirmed facts. Whether Interlock is behind that incident, and whether any data was actually stolen, remains unconfirmed.
Winkler City Hall in Winkler, Manitoba. Photo: Joeseph Sparrow, CC BY-SA 4.0, via Wikimedia Commons
What should parents and staff do now?
Watch for official word from the division itself. The division has said it would notify affected people if data was compromised, so families should treat division communications as the reliable source, not a ransomware group’s leak site listing.
Until the division speaks, the honest status is simple: a claim exists, a real October incident exists, and the link between them is not proven. Parents and staff who are worried should contact the division directly rather than assume the worst, or assume the claim is false.
Frequently Asked Questions
Has Garden Valley School Division confirmed a data breach?
No. As of research time, no public statement from the division confirms the Interlock claim. This is a claim by a ransomware group, not a confirmed breach.
What data does the group claim it stole?
The group claims it took student records for about 4,300 students, including names, birth dates, grades, attendance and special education records, plus employee payroll records, bank account information and personnel files.
What happened on October 25?
The division had network disruptions, took systems offline, and on October 30 called it a cybersecurity incident. Superintendent Dan Ward said phones were restored quickly.
A locked computer screen. Photo: Juan Pablo Olmo, CC BY 2.0, via Wikimedia Commons
Maplestime will provide updates from Garden Valley School Division as announcements are made.
Have a tip about this story? Email [email protected]
Have a correction? Email [email protected]
Should Manitoba school divisions be forced to tell parents the same day a ransomware claim appears, or is waiting for proof the right call? Tell us in the comments. And share this with every parent in the Winkler area.
Enjoying Maplestime? Support independent Canadian journalism — no paywall, no corporate owners.
