Department for Education Hit by Cyber-Attack Exposing Over 600,000 Records

A cyber-attack has compromised approximately 607,000 records held by the Department for Education, exposing contact details of parents, staff, government officials, and senior school leaders. The breach affected the department's help-desk portal and Turing Scheme platform, which manages international student funding. Authorities including the National Cyber Security Centre and National Crime Agency are investigating the incident.

Details of the Breach

The stolen data includes full names, email addresses, telephone numbers, and job titles but does not contain bank details or other sensitive financial information. According to the Department for Education, the 607,000 figure represents the total number of affected records rather than individual people, as some contact details may appear multiple times across systems. The help-desk portal accounted for just over 600,000 lines of data, while the Turing Scheme portal contained a smaller subset. Both systems are expected to return to normal operation within the week.

Perpetrators and Demands

A previously unknown hacking group calling itself ExfilSquad claimed responsibility for the attack and posted sample data on its leak website. The group demanded payment from the Department for Education and other affected organisations, threatening to release the complete dataset if ransom demands were not met. Security experts examining the leaked samples confirmed the data appeared authentic. The cybercriminals indicated they had targeted at least 14 victims across various sectors, suggesting this was part of a broader campaign.

Law Enforcement Response

The Department for Education has referred itself to the Information Commissioner's Office and confirmed it is cooperating with the National Cyber Security Centre and the National Crime Agency. A department spokesperson stated that robust processes are in place to protect information and that swift action contained the incident. The data protection risk to individuals is not considered high given the nature of information compromised. However, the breach highlights a growing problem within the education sector, with around 24 percent of further education institutions reporting attacks at least weekly, and more than half of schools experiencing breaches or attacks within the past year.