Ransomware attack knocks Queens Public Library's digital services offline across all 66 branches

On the evening of 4 November 2026, Queens Public Library — one of the largest public library systems in the United States, serving the New York City borough of Queens through 66 branches and its central library in Jamaica — confirmed that it was dealing with a ransomware attack. News of the disruption was widely reported the following day, with the library communicating the situation through social media and directly to patrons as staff worked to understand the scope of the intrusion.

The attack knocked a broad range of digital services offline. Patrons lost access to the library's website, on-site public computers, public Wi-Fi, the mobile app, digital media services, self-checkout and return machines, and the ability to renew materials. The library said it would not charge late fines on returns during the outage and warned that some virtual and in-person programs could be affected, directing people to check with their local branch. All 66 locations remained physically open, and the library cautioned that "it will take some time before the library's network and systems are restored."

Response

Queens Public Library's IT department led the recovery effort, and the New York City Police Department said it was aware of a cybersecurity incident affecting the library's systems. At the time of reporting, no established ransomware group had claimed responsibility, the library had not named a threat actor, and there was no public indication of whether patron data had been accessed or stolen.

Why it matters

Public libraries have become recurring ransomware targets because they combine broad public-facing digital services with the constrained budgets and lean IT teams typical of local public institutions — the same pressures seen in the 2023 British Library attack, whose recovery stretched across many months. A single intrusion can simultaneously sever a community's access to free internet, public computers and lending services, functions that many residents rely on and cannot easily replace, turning an IT incident into a disruption of a core public amenity.