A ransomware attack has crippled the Queens Public Library's digital operations, taking down its website, mobile app, on-site computers, free Wi-Fi, digital media services and self-service checkout and return machines, library officials said. Its branches remain open.
The network outage began Wednesday and was still unresolved Thursday afternoon, and officials warned that a fix could take some time. The library first flagged outages Wednesday afternoon and confirmed hours later that ransomware was the cause.
Library CEO Dennis Walcott said the system is working with law enforcement, including the NYPD and the FBI. He said the investigation is ongoing and that it is not yet clear who carried out the attack, why the library was targeted or whether patrons' data was exposed.
Unfortunately, it's part of the world that we live in right now,
Dennis Walcott, Queens Public Library CEO
The library said a ransomware gang encrypted its systems. As of Thursday evening, no group had claimed responsibility.
Patrons can still check books in and out in person at their local branches, Walcott said. Renewals are unavailable, but officials said no late fines will be charged on books or other media coming due. Some virtual and in-person programs may be limited, and patrons should check with their branch.
The disruption hits one of the country's largest library systems. Its 66 branches serve a borough of 2.3 million residents and offer free access to more than 5 million books in 50 languages, along with learning centers in public housing complexes, teen centers, bookmobiles and book bicycles.
Libraries have become frequent ransomware targets. Gangs have damaged dozens of public library systems worldwide, including Seattle Public Library, and in 2023 destroyed the systems of the British Library, the United Kingdom's national library. The Toronto Public Library spent months recovering from its own attack that year.
The criminal groups exploit public demand for e-books and essential services to pressure institutions into paying. Library systems also hold large amounts of data on local residents: an attack last year on the Pierce County Library System in Washington state exposed information on more than 340,000 people.
