Queens Public Library says ransomware shut down Wi-Fi, computers and the app

Queens Public Library, the library system for the New York City borough of Queens, said a ransomware attack on Wednesday, November 4, 2026 encrypted systems and knocked out a large part of its digital services. The branches stayed open. As of November 5, the library had not said who was responsible, and it had not said whether patron records were copied.

What happened

The Record reported on November 5 that the library published alerts on Wednesday. It first warned of outages that afternoon, then confirmed hours later that the cause was ransomware. The library’s own statement, quoted by The Record and by Gothamist, said on-site computers, checkout and return machines, public Wi-Fi, digital media, the website and the mobile app were down.

“All QPL locations remain open as scheduled; however, certain virtual and in-person programs may be impacted,” the library said. “We are working closely with law enforcement and cybersecurity experts to address this situation, and we will keep you informed.”

Gothamist, also on November 5, said the outage was still in effect on Thursday afternoon and could take some time to fix. Chief executive Dennis Walcott told Gothamist the library was working with the NYPD and the FBI. He said the investigation was ongoing, and that it was not yet clear who did it, why the library was targeted, or whether users’ data was vulnerable.

While renewals are unavailable, the library said people with books or other media due will not be charged late fines. Checkout and return still work in person at a branch. Programs may be limited, so the library asked people to check with their local branch.

The system has 66 branches, including adult learning centres, teen centres and mobile libraries. The Record describes it as one of the largest public library systems in the United States. No ransomware group had claimed the attack as of Thursday evening, November 5, The Record reported. New York City officials did not answer The Record’s request for comment.

What is not known yet

Ransomware often means files were both locked and copied, but that second part is not established here. Walcott told Gothamist the library does not yet know if users’ data was vulnerable. Until the library or the investigators say what was accessed, there is no list of names, card numbers, emails or borrowing records to act on. Treat any message that claims to have your library record, and asks you to pay or to “verify” an account, as unconfirmed.

Public libraries have been hit before. The Record notes the British Library in 2023, a long recovery at Toronto Public Library the same year, and a Pierce County, Washington, library attack that exposed information on more than 340,000 people. Those are other incidents, not evidence about what happened in Queens. Closer to Frame’s readers, the Burnaby School District ransomware attack is a different case, in British Columbia, with its own notices about student and staff information. It is not this attack.

What you can do

1. Use the branch, not a link in a text or email. Books can be checked out and returned in person. The library said late fines will not be charged while renewals are down.
2. Check your branch before you go for a program or for Wi-Fi. Virtual and in-person programs may be cancelled, and the public Wi-Fi was among the services taken down.
3. Do not pay anyone who writes to you about this. The library has not described a ransom note to patrons, and it has not asked patrons to pay. A message that does is not the library.
4. Wait for the library’s own update on data. If it later says patron records were copied, the useful steps depend on what was in them. Until then, changing your library PIN is reasonable if you can do it without the downed website, and guessing at stolen identity data is not.
5. Watch the library’s own channels for the next statement, rather than a screenshot forwarded in a group chat.

How Frame helps

The library has not said that email addresses were taken, so there is no breach record to add yet. If a later notice names a set of emails and that set is loaded into a breach catalog, Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame never collects or stores the leaked records themselves.

Related coverage

• Burnaby School District ransomware: what families should know: a separate ransomware attack on a public institution, this one a school district in British Columbia, with confirmed exposure of student and staff information.

Sources

• The Record, Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers, November 5, 2026
• Gothamist, Queens Public Library online system downed by ransomware hack, officials said, November 5, 2026