A high school in south London, Charles Darwin School, has been forced to close its doors temporarily due to a severe ransomware attack. The incident has left approximately 1,300 students without access to their educational facilities for the first half of the week.
The attack, which was identified as a cyber extortion attempt, has disrupted the school’s IT systems, leading to significant operational challenges and concerns about data security.
The school’s headteacher, Aston Smith, wrote to parents and guardians to explain the gravity of the situation.
The ransomware attack has compromised the school’s IT infrastructure, making accessing essential systems, including email and internet services, impossible.
Decoding Compliance: What CISOs Need to Know – Join Free Webinar
As a precaution, all staff devices have been removed for cleansing, and students’ accounts have been disabled to prevent further breaches, reads the letter.
The school has engaged cybersecurity experts and data recovery specialists to assess the extent of the breach and initiate recovery processes.
The Information Commissioner’s Office (ICO) has been notified, and a full data impact assessment is underway to determine what information the attackers may have accessed. Fortunately, cloud-based systems like Parent Pay were not affected.
Ransomware attacks on educational institutions have been on the rise globally, with schools becoming frequent targets due to often outdated security measures and limited cybersecurity resources.
In 2023 alone, the education sector saw a significant increase in ransomware incidents, with a 92% spike in attacks on K-12 institutions. These attacks disrupt educational activities and pose a risk to sensitive student and staff data.
The National Cyber Security Centre (NCSC) has been actively monitoring these incidents and has previously warned educational establishments about the growing threat of ransomware.
Despite these efforts, schools like Charles Darwin face challenges in safeguarding their IT systems against sophisticated cybercriminals.
As the school works towards restoring its systems, parents and students have been advised to remain vigilant and report any suspicious communications.
The school is utilizing alternative platforms like Satchel One to maintain educational continuity during this challenging period.
Download Free Incident Response Plan Template for Your Security Team – Free Download