Cyber attacks against the ,education sector have significantly increased over the last 2 years, we've seen attacks on colleges, universities, primary schools and secondary schools across the region.

The attacks that have taken place have impacted schools in various ways, with some schools facing tougher repercussions than others. The type of cyber attack that schools are often facing is ransomware, which is malicious software designed to block access to computer systems and encrypt your data until a ransom is paid.

This year's Cyber Security Breaches Survey showed that 18% of Higher education institutions had experienced Ransomware attacks. The survey also showed that just 27% of primary schools have completed a cyber-security vulnerability audit in the last 12 months.

Ransomware involves the use of computer viruses that threaten to delete (or release publicly) your files unless the ransom is paid (often in bitcoin). Like other computer viruses, it usually finds its way onto a device by exploiting a security hole in vulnerable software, cracking weak passwords or by tricking somebody into installing it via phishing emails.

Why do criminals target the education sector?

Cybercriminals are deploying ransomware to encrypt your sensitive data, as it will have the biggest impact on your services. This can affect staff and students' access to computer networks as well as services including email systems, payment systems, phone applications and websites.

Every school holds valuable information just like any business, this information could be student medical records, parent's contact details, bank details, exam grades and teacher's personal information. This information is valuable as the criminals behind the attack can publicly leak the data online or sell the data to cybercriminal forums and dark web marketplaces for additional revenue.

The 2022 Cyber Security Breaches survey showed:

• The percentage of organisations that have identified breaches or attacks in the last 12 months; the lowest was 41% for Primary Schools, rising to 70% for Secondary schools and 88% for Further education colleges.
• Around six in ten (62%) higher education institutions reported experiencing breaches or attacks at least weekly.
• Phishing Attacks on schools and colleges remain the most popular method of attack; with 88% of Primary Schools, 87% of Secondary schools and 93% of Further education colleges experiencing phishing attacks in the last 12 months.

How can I protect my organisation from a ransomware attack?

• Always back up your data, restoring files from a backup is the quickest way to regain access to your data.
• Never click on unverified links in emails, especially when they are from sources or senders that you don’t recognise.
• Have your IT department regularly scan emails and systems for malware.
• Only download files from trusted sites - this includes applications for phones and tablets.
• If you are using public Wi-Fi, use a VPN or use your mobile phone 4G connection.
• Do not plug in unfamiliar USB devices into your laptops or computers.

How can the North West Cyber Resilience Centre help my school?

To help the education sector (schools, colleges and universities) to outsmart cybercriminals and toughen up their cyber security, we suggest you complete our ,Cyber Health Check.

Designed in collaboration with Police and ISO accredited Risk Managers our Cyber Health Check will provide your school/college/university with a summary of your Cyber Risks and an action plan which will help protect you against the latest cyber threats.

This report may suggest you should look into an annual vulnerability assessment of your network, offer ,security awareness training to your staff and test them through a simulated phishing exercise.

⚠️ Just four in ten primary schools and around half of secondary schools have given staff Security Awareness Training in the last 12 months. ⚠️

We encourage schools, colleges and universities in the North West to sign up for free ,Membership and to ,download practical resources and tools that will help you identify your risks and vulnerabilities. Through our membership, you will also get regular updates on new threats and can train your staff and help them to integrate security measures into your organisation.