Ransomware Group Claims Wellington College Bangkok as a Victim
Cybercrime trackers have listed Wellington College's Bangkok campus on a public extortion site, with stolen credentials among the material at risk of release. The school has not confirmed the incident.
A ransomware collective known as TheGentlemen listed Wellington College International School Bangkok on its public data leak site on October 17, according to DeXpose, a threat intelligence platform that monitors extortion campaigns. The group threatened to release sensitive school data unless the institution entered ransom negotiations.
Wellington College Bangkok opened in 2018 as the Thai branch of Wellington College UK. It enrols around 1,100 students aged 2 to 18 on a 28-acre campus in eastern Bangkok. The school had not issued a public statement confirming or denying the incident as of the date of this report.
What the trackers documented
Multiple cybersecurity monitoring platforms recorded the same listing. Credential data cited by one tracker showed 87 exposed passwords and a number of third-party staff credentials among the compromised material. The full scope of any breach, including whether student or parent records were affected, has not been confirmed publicly.
TheGentlemen operates as a ransomware-as-a-service group. Rather than conducting attacks directly, the organisation licenses its infrastructure to criminal affiliates, who identify targets, exfiltrate data, and negotiate ransoms. Education has become an attractive sector for these groups across Southeast Asia. Schools hold passport copies, financial records, and personal data for thousands of families, often on systems that were not designed with enterprise-level threat environments in mind.
A pattern across the region
The claim follows a series of extortion attempts against international schools in Southeast Asia in 2026. Security specialists note that premium international schools are particularly exposed: the combination of affluent families, large volumes of sensitive personal data, and governance structures that still treat IT as an administrative cost rather than a risk function makes them targets. Several school group audits conducted in Asia this year have identified data governance as an area that requires urgent attention.
Wellington College operates more than a dozen campuses across Asia, from China and India to Thailand. None of the network's other campuses have been named in connection with this incident. For now, families at the Bangkok school are left without a formal account of what happened or any guidance on whether their personal data is at risk of disclosure.