Ransomware Disrupts Krum Public Library; NightSpire Claims 50 GB Data Sale
Summary
Krum Public Library confirmed a May 14 ransomware attack that disrupted services and led to unauthorized access to some files. NightSpire later claimed 50 GB of library data was for sale; officials have not verified the claim.
Key points
- The library said a May 14 ransomware attack temporarily disrupted computer access, printing and Wi-Fi, and limited checkout.
- A forensic investigation found that some files on the library network were accessed without authorization; officials are reviewing them for sensitive personal information.
- NightSpire claimed on its leak site that 50 GB of library data was for sale, including financial, HR and supervisor information. The claim and data’s origin have not been independently verified.
- The city said the incident was limited to the library environment and did not affect the broader city network or other city services.
- The library said backups helped prevent permanent loss of critical data and that its network is now secured, with no further unauthorized access reported.
- Officials said no Social Security numbers or personal financial account information were affected.
Article Details
- Victim Organization
- Krum Public Library
- Victim Domain
- Not disclosed
- Incident Type
- Ransomware attack
- Incident Date
- 2026-05-14
- Disclosure Date
- 2026-05-15
- Data Types Exposed
- Financial documents (claimed by NightSpire; not independently verified)
- HR data (claimed by NightSpire; not independently verified)
- Supervisor information (claimed by NightSpire; not independently verified)
- Affected Records
- Unknown
- Affected Data Size
- NightSpire claimed 50 GB of data was for sale; the claim and the data’s connection to the library were not independently verified.
- Operational Impact
- Computer access, printing, and Wi-Fi were temporarily unavailable, and checkout was limited to five items. The city said the attack was limited to the library environment and did not affect broader city operations or services. The library reported no permanent loss of critical data and said its network was secured with no further unauthorized access.
- Ransom Or Extortion
- The library said attackers demanded an extortion payment and could retaliate by publishing data they claimed to have stolen. NightSpire later claimed to be selling library data, but officials have not confirmed that data was taken from the library or published.
- Claim Status
- confirmed