The recent cyberattack on the Education Authority continues to affect schools in Northern Ireland, as efforts to restore access to critical IT systems are ongoing.
Following the cyberattack on the Education Authority's systems last Thursday, thousands of students and staff were unable to log in to key platforms used for assignments, revision and communication, particularly ahead of the exam period.
See also: Meta suspends cooperation with Mercor after breach
The Education Authority (EA), which runs the C2K network that provides all online services to Northern Ireland schools, said on Sunday it was making “good progress” in safely restoring access. However, the scale of the cyberattack means recovery will be complex and time-consuming.
Restoration Efforts in Progress
EA confirmed that teams were working throughout the weekend to address the impact of the cyberattack on systems . The immediate focus was on restoring services in phases, starting with secondary schools. Authorities noted that systems must be brought back up “safely.”
All IT services in Northern Ireland schools are provided through the centrally managed C2K network, meaning the disruption was widespread.
Students were unable to access study materials, submit assignments, or communicate with teachers, an issue that has caused significant concern, especially for those preparing for upcoming exams (according to the BBC).
See also: Drift: $285 million stolen through North Korea social engineering
Education Authority: Password Reset
The Education Authority said "immediate action" was taken to contain the threat, including launching a full investigation into the incident.
Schools have been notified to reset their passwords. This step was necessary to protect user accounts across all schools in Northern Ireland.
Despite these actions, EA has yet to confirm whether any personal data was breached. The organisation is currently working with the Information Commissioner's Office and other relevant authorities to determine the extent of the breach and ensure compliance with data protection requirements.
See also: Inside a breach: What happens in the first 24 hours after a cyberattack
Schools Manage Disruption and Recovery
Schools have begun to deal with the impact of the cyberattack locally. At Sullivan Upper School in Holywood, County Down, headteacher Craig Mairs told parents that access had been restored for senior teaching and non-teaching staff by Sunday morning. However, Mairs explained that restoring access for all users is “a very significant undertaking”, as each student and staff member’s password has to be updated individually. The process is being carried out in stages, year by year.
To support students affected by the cyberattack on the Education Authority's systems, the school has announced that it will open on Easter Monday specifically for students aged 11 to 14, who are preparing for exams. Staff will be available between 09:30 and 11:30 BST to help with password resets before the new term begins. Meanwhile, passwords for younger students (aged 8 to 10) will be set after the Easter holidays, with priority given to students taking exams across all schools in Northern Ireland.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
