Cyber security and data breaches
with confidential information about pupils, staff and parents being leaked onto the dark web.
Files with names such as ‘contracts’ with staff pay scale and contract details, ‘passports’ with scans of pupil passports and ‘SEN information’ were among the first targeted by the cyber attackers.
Such a breach of security triggers notification to the Information Commissioner’s Office (ICO). Data controllers are required to notify the ICO without undue delay and within 72 hours of becoming aware of the data breach.
Controllers may also need to inform the data subjects (although there are some exemptions). In the reported cases, staff and pupils were informed and support was offered.
Implications for safeguarding
From a safeguarding perspective, states that schools are responsible for ensuring that the appropriate level of security protection procedures are in place to safeguard systems, staff and learners. The effectiveness of these procedures should be reviewed periodically.
These incidents come as a timely reminder to schools to update internal breach notification procedures, including incident identification systems and incident response plans.
Check your school’s insurance policy to ensure data breaches are covered and keep the internal breach register up to date.
Further information and support
Links to additional guidance on cyber security, including for governors and trustees, are also cited in KCSIE. ( and )
We offer a range of expert support, guidance and training for staff at all levels to mitigate and handle data breaches effectively and compliantly.
Find out more about data protection and information security for schools
Related expertise
You may be interested in...
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Stark increase in rates of school suspensions and exclusions
Online Event
Embracing AI to improve school governance
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Navigating workplace sexual harassment laws during the festive season
Press Release
Comments on the latest SEND tribunal statistics
Guide - PFI expiry
PFI expiry guidance for schools
Opinion
Revolutionising the Workforce: Impact of Get Britain Working White Paper
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The power of storytelling (and curiosity)
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - London Market Quarterly
London Market Quarterly December 2024: An eye on what the market needs to know
Online Event
Supporting universities to meet their financial duties
Podcast - #EdInfluence
#EdInfluence podcast (series 4): In conversation with inspiring leaders
Press Release - School leaders survey
°ÄÃÅÁùºÏ²Ê×ÊÁÏ’s latest School Leaders Survey illustrates need for better SEND guidance as exclusions rise
Press Release
New hires at °ÄÃÅÁùºÏ²Ê×ÊÁÏ will support schools with data compliance amid enhanced ICO scrutiny
Published Article
Johnson et al v FirstRand Bank: Judgment sends warning across financial services intermediation
Opinion
Balancing employer flexibility and employee rights
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - School leaders survey
School Leaders Survey Autumn 2024: The results are in
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Technology trends in the food and drink sector: Consumer targeting technologies
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
How the Data (Use and Access) Bill will impact the public sector
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The ‘grate’ cheese robbery: Implications for insurance professionals
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Environmental crime and the impact for insurers
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Carbon fraud prompts insurance response
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
What might a Trump victory mean for the UK insurance industry?
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Post Office scandal: Lessons for underwriters
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Weather protection parametric insurance: A sign of things to come?
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - Be Connected (schools)
Be Connected: Schools and academy trusts November 2024
On-Demand
Shaping a culture of respect and safety: Preventing sexual harassment in our schools
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Funding withdrawn for trusts and academy conversions
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Top five takeaways for schools on the Employment Rights Bill
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Martyn's Law: A closer look at the UK's new proposed anti-terror measures
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
A new digital era: Coimisiún na Meán publishes Online Safety Code
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
New High Court case on exclusion reconsiderations
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
e-Evidence Package: Increased obligations on service providers to cooperate with data requests from law enforcement authorities
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Building an inclusive workplace: strategies for attracting and retaining disabled talent
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
New practical guidance on challenging Ofsted inspections
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
What will the new RISE Scheme mean for schools and academy trusts?
On-Demand
How schools can grapple with new employment law to thrive in a new era
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Five steps to turn the tide on Subject Access Requests
Guide
New guidance for intervention in schools
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Silence persists on gender questioning guidance for schools
Online Event
EdCon 2025
