Queens Public Library ransomware attack — website, Wi-Fi, checkouts down
Severity: medium · Patch status: no-fix-needed · Since 2026-11-05
New York City's Queens Public Library (QPL) confirmed on 5 November 2026 that it is battling a ransomware attack. The incident took down the library's website, on-site computers, checkout and return machines, public Wi-Fi, mobile app, and digital media services; renewals are unavailable, though late fines are not charged. All three branches, including the central Jamaica library, remain open, but some virtual and in-person programs may be affected. No established ransomware group has claimed responsibility, and attacks on publicly funded institutions rarely yield lucrative payouts. The article draws comparison to the British Library's 2023 Rhysida attack, whose recovery remains incomplete nearly three years later. QPL's IT department is working on restoration, with no timeline given.
What to do
- Monitor QPL social media and phone branches for service availability before visiting
- Assume any data submitted to QPL systems around the incident could be at risk until the library confirms scope
- Treat QPL email or notifications about the outage with suspicion for phishing lures
- Review ransomware resilience: offline backups, network segmentation, and incident response plans for public-facing services
Sources
All live incidents on Threat Watch
