Cyber attack hits UK school: St. Augustine Academy in Maidstone falls victim

The Church of England St. Augustine Academy in Maidstone, a secondary school serving a community of over 750 students, has become the latest victim in a series of cyberattacks targeting UK schools.

Headteacher Jason Feldwick alerted parents through a Facebook post, revealing that the school had fallen victim to an external cybercriminal organization. The security breach occurred late last week. The attackers targeted the school’s email systems and telephone lines, leaving them inaccessible. Data stored within the school’s systems was also encrypted, creating further complications.

While it remains uncertain whether any data was stolen during the breach, cybersecurity experts suggest it is a distinct possibility. Typically, cybercriminals deploy encryption as a final step in a ransomware attack, often after exfiltrating valuable information that can be used for extortion or other malicious purposes.

Despite the breach, the external WisePay payment system, used for various school transactions, has remained secure. Feldwick, however, advised parents to exercise extra caution, particularly if they receive unexpected emails or phone calls following the incident, as fraudsters may attempt to exploit any compromised data.

In the wake of the attack, there is growing concern that cybercriminals may use any stolen data for targeted phishing attacks to extract further monetizable information or engage in identity fraud.

Matt Aldridge, a principal solutions consultant at OpenText Cybersecurity, urged all UK schools to proactively enhance their cybersecurity measures. He recommended signing up for the National Cyber Security Centre’s free Web Check and Mail Check services, which help identify common browser-based vulnerabilities and bolster email security.