"UK Schools Hit by Mass Leak of Confidential Data"

Confidential data from 14 UK schools have recently been leaked online by hackers following attacks that took place in 2022.  The leaked documents include children's SEN information, pupil passport scans, staff pay scales, and contract details.  The information was leaked after the impacted schools refused to pay the attacker's ransom demands.  According to authorities, the attacks and leaks are believed to be perpetrated by the threat actor Vice Society, which has conducted numerous ransomware and extortion campaigns targeting education institutions in the UK and the US.  In October 2022, the Los Angeles Unified School District (LAUSD) warned that Vice Society had begun posting data it stole from the institution.  "The schools impacted by the new leak are: Carmel College, St Helens; Durham Johnston Comprehensive School; Frances King School of English, London/Dublin; Gateway College, Hamilton, Leicester; Holy Family RC + CE College, Heywood; Lampton School, Hounslow, London; Mossbourne Federation, London; Pilton Community College, Barnstaple; Samuel Ryder Academy, St Albans; School of Oriental and African Studies, London; St Paul's Catholic College, Sunbury-on-Thames; Test Valley School, Stockbridge; The De Montford School, Evesham."  The education sector has been heavily targeted by ransomware in the past few years.  Security researchers at Sophos discovered that in July 2022, 56% of lower education institutions had been hit by ransomware in the previous year, along with 64% of higher education bodies.

Infosecurity reports: "UK Schools Hit by Mass Leak of Confidential Data"