Skip to main content

Cyber security: one trust's story

Poster: One trust's story

This poster highlights a trust’s experience with a ransomware attack to show the severe impact such incidents can have and why it’s crucial to protect yourself.

View and print PDF

Full text of poster

This real life case study shows what can happen without the right protection in place. The DfE Cyber Security Hub can help you stay ahead of these threats.

An academy trust in England with over 6000 pupils and 800 staff experienced a ransomware attack.

Around 2 million files and 2 terabytes of data were taken, including names, addresses, national insurance numbers and possible bank details. Everything connected to the system was infected or compromised, including the catering payment system, costing the Trust significant daily costs. 1,500 Key Stage 4 students working towards exams felt the impact of the attack, as lost data included coursework and assignments.

The Trust had a cyber response plan, which they followed immediately, as well as cyber cover that gave them access to specialists to help with the response and recovery. The Trust has since implemented 2-factor authentication and revised their password policy. School level firewalls have also been implemented to better control and restrict network traffic between VLANs and sites.

Attitudes and perceptions have also changed, and they recognise cyber security measures are critical to have in place.

Total estimated cost of damages: £1 million

“I strongly believe actions and advice should be focused on being prepared and being ready to respond to when an attack happens.” - CEO of the Academy Trust