Queens Public Library confirmed a ransomware intrusion on Wednesday evening and has been offline across most of its services since.
The outage covers the library’s website, the computers on its floors, self-checkout and return machines, public Wi-Fi, the mobile app and its digital media lending. Renewals are also down. Late fees were abolished in 2021, so returning nothing on time carries no direct cost to borrowers.
What still works
All three branches stayed open, including the central building in Jamaica, Queens, though the library warned that restoring the network will take time. Programs, both in person and virtual, may be affected, and visitors were told to call their local branch before travelling.
No ransomware group had claimed the intrusion as of Thursday.
Why libraries keep landing here
Public library systems carry a wide catalogue of data and a thin security budget, and their outages are loud. The British Library spent two years recovering from a Rhysida attack in 2023 after refusing a demand of 20 Bitcoin. Its annual report this July said restoration of electronic purchasing and legal deposit access is still incomplete and may run to the end of 2026.
That is the real lesson from the sector’s recent history. The recovery is measured in years, it consumes reserves, and refusing to pay does not shorten it.
For Queens, the immediate questions are whether backups were kept offline and whether the checkout terminals held any card data. Neither has been answered.
