VULNpocalypse
HighBreach / campaignActive

Queens Public Library knocked offline by ransomware, Wi-Fi, checkouts and website down across 66 branches

Queens Public Library says a ransomware attack downed its website, Wi-Fi, on-site computers, checkout machines and app. All 66 branches stay open.

Published
Updated

What happened

  • Queens Public Library, one of the largest public library systems in the United States, serving Queens’ roughly 2.3 million residents with more than 5 million books in 50 languages, disclosed that a ransomware attack had disrupted much of its digital operation (The Record).
  • QPL first reported outages on Wednesday afternoon and confirmed the cause hours later, on Wednesday evening, through its social media channels and messages to patrons (The Record; The Register).
  • The library characterized the incident as a ransomware attack that encrypted its systems (The Record; The Cyber Express).
  • Affected services include the website (queenslibrary.org), on-site computers, check-out and return machines, free Wi-Fi, the QPL mobile app, and digital media / digital services; renewals were unavailable during the outage (The Register; The Cyber Express).
  • All 66 branches, including the central library in the Jamaica neighborhood, remained open as scheduled, though QPL said “certain virtual and in-person programs may be impacted” and told patrons to check with their local branch by phone or via social media (The Register; The Record).
  • QPL said it is “working closely with law enforcement and cybersecurity experts” and that “our IT department is working to resolve the issue, and we will keep you informed,” while cautioning that “it will take some time before the library’s network and systems are restored” (The Record; The Register).
  • At the time of The Cyber Express’s reporting the QPL website was still unreachable, and the library had not responded to its request for comment; New York City officials did not respond to The Record’s request for comment (The Cyber Express; The Record).

What we know / don’t know

Confirmed (by QPL, as reported):

  • A ransomware attack has encrypted QPL systems and taken multiple patron-facing services offline (The Record; The Cyber Express).
  • The outage reaches every location at the network level, but all 66 branches stayed physically open (The Cyber Express; The Register).
  • QPL is engaging law enforcement and outside cybersecurity experts and expects a prolonged restoration (The Record).

No group claim / not yet attributed:

  • As of Thursday evening, no ransomware gang had claimed responsibility for the attack, and none of the three sources names a perpetrator (The Record; The Register). (The Cyber Express links to an unrelated page on Ryuk ransomware charges but does not attribute this attack to Ryuk (The Cyber Express).)

Unknown / not disclosed:

Context (other library incidents cited by the sources, not part of this attack):

  • The Record cites prior ransomware attacks on Seattle Public Library, the British Library (2023, systems destroyed), Toronto Public Library (2023, months of recovery), and Washington State’s Pierce County Library System, whose breach “last year” exposed data of more than 340,000 people (The Record).
  • The Register notes the British Library’s 2023 attack by the Rhysida group, its refusal of a reported 20-bitcoin demand, and a recovery still expected to finish by end of 2026 per its July 2026 annual report (The Register).
  • The Cyber Express cites earlier incidents at Seattle Public Library (2024) and London Public Library (Ontario, December 2023) (The Cyber Express).

Sources