Queens Public Library hit by ransomware at 66 branches - 2-Spyware

The attack has disabled the library's website, mobile app, public Wi-Fi, on-site computers and checkout machines at all 66 branches. While the buildings remain open, borrowing, printing and internet access have been severely impacted. Library officials have not yet confirmed whether personal data was taken during the incident.

The library first warned of outages on Wednesday afternoon and later confirmed that a ransomware gang had encrypted its systems. By Thursday morning, services were still down with no timeline provided for restoration. The library stated it 'will take some time before the library's network and systems are restored.'

Affected Services

The library's own posts list the website, the app, on-site computers, check-out and return machines, free Wi-Fi and its digital media services as affected. Renewals are unavailable, and some virtual and in-person programs may be cancelled or changed. Patrons are advised to call their branch before making a trip for a class or event.

NY1 spoke with one regular computer user who had to borrow her daughter's laptop and could not print documents. The system serves 2.3 million residents of the borough, with more than one million people using it every year. For students who print homework or people without internet at home, this disruption creates significant daily challenges.

Data Theft Concerns

The library is still assessing the effect on its systems, data and operations. It has not yet confirmed whether any information was exposed, and no ransomware group has claimed the attack as of Thursday. Many ransomware gangs steal files before locking networks, as demonstrated by a 2025 attack on a Washington State library system that exposed information on more than 340,000 people.

Response and Investigation

Library president Dennis Walcott asked for patience, stating, 'We ask for the public's patience and understanding as we manage this challenge.' The library is working with the NYPD, federal partners, City Hall and outside cybersecurity experts. The NYPD confirmed it is 'aware of a cybersecurity incident impacting Queens Public Library computer systems' and is collaborating with the library and FBI on the investigation and recovery.

Meanwhile, the library has suspended charging late fines on borrowed materials. This follows a pattern of attacks on library systems, including the Seattle Public Library and Toronto Public Library, which spent months recovering from a 2023 attack described as a crime scene.

What Comes Next

Patrons should check the library's official social media pages or call their branch before visiting, as the website and app remain down. Those who reuse their library PIN or password elsewhere should change it immediately on other accounts. Be cautious of messages mentioning the library or unpaid fines, as scammers may exploit the situation.

Three key developments to watch: whether a ransomware group claims the attack and posts stolen files, whether the library sends notices to cardholders, and how quickly services return. The British Library serves as a stark example after it refused to pay a 20 Bitcoin ransom following a 2023 attack by the Rhysida gang and is still rebuilding at a cost of millions.