# Queens Public Library in New York hit by ransomware: website, Wi-Fi, app and checkouts down · pwn.watch > Queens Public Library (QPL), New York City's library system for the borough of Queens, says a ransomware attack caused a significant network outage affecting systems at all its locations. On Nov 4 2026 it first reported a network outage, then that evening said the disruption was the result of a ransomware attack. The library website, on-site computers, check-out and return machines, free Wi-Fi, the QPL mobile app and digital media services are down, and renewals are unavailable. Locations remain open as scheduled, though some programs may be affected. QPL says it is working with law enforcement and cybersecurity experts and that restoring its network and systems will take some time. No ransomware group has claimed the attack, and QPL has not said whether patron data was taken. Page: https://pwn.watch/i/queens-public-library-ransomware-nov-2026 · generated 2026-11-05T14:39:04.572Z ## Status - Severity: medium · status: live · patch: partial - Product: Queens Public Library network and patron services - Started: 2026-11-03 - Affected: Queens Public Library website, on-site computers, check-out and return machines, free Wi-Fi, mobile app and digital media services - Fixed in: Restoration in progress; nothing for patrons to patch ## Follow this incident - RSS (one item per update): https://pwn.watch/i/queens-public-library-ransomware-nov-2026/feed.xml - JSON Feed: https://pwn.watch/i/queens-public-library-ransomware-nov-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/queens-public-library-ransomware-nov-2026.json - This file: https://pwn.watch/i/queens-public-library-ransomware-nov-2026/llms.txt ## Updates (newest first) - 2026-11-05: The Register reports no established ransomware group has claimed the attack yet. (https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796) - 2026-11-04: Queens Public Library reports a network outage across all its locations: its website, on-site computers, check-out and return machines, free Wi-Fi, mobile app and digital media services are unavailable, while locations stay open. (https://x.com/QPLNYC/status/2118042182955491759) - 2026-11-04: QPL says the disruption is the result of a ransomware attack, that it is working with law enforcement and cybersecurity experts, and that restoring its network and systems will take some time. A patron email the same day also confirmed a ransomware incident. (https://x.com/QPLNYC/status/2118128693914874122) ## Fix brief # Security brief: Queens Public Library in New York hit by ransomware: website, Wi-Fi, app and checkouts down Source: https://pwn.watch/i/queens-public-library-ransomware-nov-2026 · status: live · severity: medium · updated Nov 5, 2026, 12:31 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is Queens Public Library (QPL), New York City's library system for the borough of Queens, says a ransomware attack caused a significant network outage affecting systems at all its locations. On Nov 4 2026 it first reported a network outage, then that evening said the disruption was the result of a ransomware attack. The library website, on-site computers, check-out and return machines, free Wi-Fi, the QPL mobile app and digital media services are down, and renewals are unavailable. Locations remain open as scheduled, though some programs may be affected. QPL says it is working with law enforcement and cybersecurity experts and that restoring its network and systems will take some time. No ransomware group has claimed the attack, and QPL has not said whether patron data was taken. Severity detail: System-wide outage of a large public library network; no data theft confirmed yet - Product: Queens Public Library network and patron services ## Affected versions - Queens Public Library website, on-site computers, check-out and return machines, free Wi-Fi, mobile app and digital media services ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix Upgrade to one of these fixed versions (or later on the same branch): - Restoration in progress; nothing for patrons to patch After upgrading, re-run the checks above and redeploy/restart the affected services. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes Queens Public Library patrons have nothing to patch. Follow @QPLNYC or call (718) 990-0728 for updates, and treat unexpected emails or calls claiming to be from QPL about your account as possible phishing until the library says whether patron data was taken. ## Latest updates - Nov 5, 2026: The Register reports no established ransomware group has claimed the attack yet. - Nov 4, 2026: Queens Public Library reports a network outage across all its locations: its website, on-site computers, check-out and return machines, free Wi-Fi, mobile app and digital media services are unavailable, while locations stay open. - Nov 4, 2026: QPL says the disruption is the result of a ransomware attack, that it is working with law enforcement and cybersecurity experts, and that restoring its network and systems will take some time. A patron email the same day also confirmed a ransomware incident. ## Advisories - [An update about the network outage that continues to affect QPL](https://x.com/QPLNYC/status/2118128693914874122) (Queens Public Library) ## Write-ups & news - [New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark](https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796) --- Machine-readable: https://pwn.watch/i/queens-public-library-ransomware-nov-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.