- The Department for Education (DfE) has experienced a cyberattack, leading to the reported theft of approximately 607,000 records, including full names, job titles and email addresses of school leaders, university staff and government officials.
- The breach specifically targeted the DfE help desk, which handles requests from local authorities and schools, alongside the Turing Scheme database, used to manage UK students studying abroad.
- A cybercriminal group identified as ExfilSquad has reportedly claimed responsibility for the hack, with evidence of their claims appearing on the dark web.
- Despite the incident, DfE sources suggest the data protection risk to those affected is not high, as the stolen data sets are reportedly unconnected; the department has informed the Information Commissioner’s Office and is working with the National Crime Agency and National Cyber Security Centre.
- Cybersecurity experts have cautioned that government agencies are frequently 'soft targets' for cybercriminals due to potential underfunding, emphasising that this type of attack is not an isolated event and urging individuals to remain vigilant against unsolicited communications.
IN FULL
