CVE Index中文
L3 · Shartedransomware · public services · libraryqueens-public-library-ransomware

Ransomware disrupts Queens Public Library across all locations

Queens Public Library confirmed a systemwide ransomware outage. Checkout and return machines and Wi-Fi have been restored at open locations; the website, app, public computers and digital media services remain affected.

Disclosed
Nov 4, 2026
Public disclosure date
Severity
Sharted
No CVE: a breach, not a bug
Splash zone
Queens Public Library patrons and programs relying on its branch computers, website, app, renewals or digital media services.
ransomware · public services · library
In the wild
Yes
QPL confirmed ransomware; it has not confirmed theft of patron data.

What happened

Queens Public Library confirmed that ransomware disrupted the network serving all its locations. Branches stayed open, although some programs could be affected. The first confirmation covered the website, mobile app, on-site computers, digital media services, self-service checkout and return machines, and public Wi-Fi. The later update restored machines and Wi-Fi at open locations; it did not announce full recovery.

The library has not publicly identified the entry point, ransomware group, a recovery deadline or the scope of any patron-data access. L3 reflects the disruption to a public library network across all locations. The outage does not establish theft of patron records or a compromise of a particular vendor.

QPL published its initial confirmation and restoration update on its official social account. The cited public copies preserve both threads.

Crime-scene timeline

  1. Nov 4, 23:50 UTC

    Queens Public Library confirms ransomware across its network

    All locations were affected. The library said it was working with law enforcement and cybersecurity experts.

  2. Nov 7, 01:13 UTC

    Checkout and return machines and Wi-Fi are restored at open locations

    The library website, mobile app, on-site computers and digital media services remained affected. Renewals were still unavailable.

Who said what

We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.