A ransomware attack has disrupted Queens Public Library’s digital services in New York City, disabling public computers, Wi-Fi and checkout machines while library buildings remain open.
The independent nonprofit library system has 66 locations across Queens, one of the city’s five boroughs. Its outage affects systems at all locations, the library said in a public statement Wednesday.
Its website, checkout and return machines, mobile app and digital media services are unavailable, the library said.
Patrons also cannot renew borrowed materials. The library reminded users that it does not charge late fines and directed them to telephone assistance and social media updates.
Locations are keeping their scheduled hours, but some virtual and in-person programs may be affected. Patrons should check with their local branch about programming, the notice said.
The library said it is working with law enforcement and cybersecurity experts and cautioned:
“Please note it will take some time before the Library's network and systems are restored.”
DysruptionHub could not reach the library’s website during a Thursday morning check. The status of its other affected services could not be independently verified.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
An earlier Wednesday notice described the systemwide outage without naming its cause. The Register reported that QPL acknowledged ransomware that evening. Neither notice establishes when the intrusion began.
An April 2025 ransomware attack on Pierce County Library System in Washington interrupted its catalog and self-checkout services while physical borrowing and in-person programs continued. In Michigan, Kent District Library closed branches after an April 2026 ransomware attack, then began reopening with limited services while public computers and printers remained unavailable.
Queens Public Library has not identified the attackers or said whether patron or employee information was accessed or stolen. It has provided no timetable for restoring the unavailable services.
