---
title: "School Cybersecurity: The Risks and Costs of an Attack"
description: Discover the risks and costs of cyberattacks on schools and the education sector. Learn how schools can mitigate attacks and strengthen their cybersecurity measures to protect sensitive data.
image: https://blog.schoolsandacademiesshow.co.uk/hs-fs/hubfs/Screenshot%202021-07-28%20at%2016.35.48.png?width=1855&name=Screenshot%202021-07-28%20at%2016.35.48.png
---

[ All posts ](https://blog.schoolsandacademiesshow.co.uk/all)

 August 18, 2021

# School Cybersecurity: The Risks and Costs of an Attack

    Chris Callaghan  ·   4 minute read

Many presume cyberattacks are only levied against governments or multinational businesses. Unfortunately, that isn't the case. The education sector and schools, in particular, are also at risk as there's always data to steal. 

![costs of a cyberattack](https://blog.schoolsandacademiesshow.co.uk/hs-fs/hubfs/Screenshot%202021-07-28%20at%2016.35.48.png?width=1855&name=Screenshot%202021-07-28%20at%2016.35.48.png)

For example, in June 2021, two schools in Kent — Skinners’ Kent Academy and Skinners’ Kent Primary school — were forced to close [after their hackers breached their servers.](https://www.kentonline.co.uk/tunbridge-wells/news/cyber-attack-forces-schools-to-close-248682/) Sensitive data such as personal details were stolen. Other notable cases include:

- The Harris Foundation was [attacked by ransomware](https://www.bbc.co.uk/news/technology-56569873) in March 2021, leaving 37,000 pupils unable to access their email.
- Also in March 2021, 17 schools within the Cambridge Meridian Academies Trust (CMAT) [identified ransomware in their shared network](https://www.stamfordmercury.co.uk/news/hackers-target-schools-trust-with-ransomware-attack-9191703/).
- 15 schools in Nottingham’s Nova Education Trust [were shut after an attack](https://schoolsweek.co.uk/surge-in-devastating-ransomware-attacks-cripples-schools/) in the same timeframe.
- On March 16th 2021, 24 schools across South Gloucestershire were hit by what was described as a [‘highly sophisticated’ ransomware attack](https://www.gazetteseries.co.uk/news/19242374.ransomware-attack-24-south-gloucestershire-schools/). 

These attacks resulted in an abrupt loss of service, impacts of COVID-19 testing being carried out by the schools and the costs incurred by having to rebuild hardware. 

The impact of a cyber attack on a school is difficult to predict. In this blog, we will be exploring potential impacts as well as mitigation efforts that can be employed.

- Cyberattacks on UK Schools
- How Are Schools Vulnerable?
- Costs and Risks of Poor Cyber Security
- How Schools Can Mitigate Attacks

## Cyberattacks on UK Schools

[According to the National Cyber Security Centre](https://www.ncsc.gov.uk/news/alert-targeted-ransomware-attacks-on-uk-education-sector) (NCSC), there’s been an increase in the number of ransomware attacks on the UK education sector from 2020 to 2021. Attacks like these have the potential of causing significant damage to an institution in terms of lost data, financial harm and the need to close. 

Ransomware itself is a type of malware preventing data owners from accessing their systems or the data stored there. It’s called ransomware because the data is effectively ransomed until the owner can pay to re-access the data.

The NCSC states: “In recent incidents affecting the education sector, ransomware has led to the loss of student coursework, school financial records as well as data relating to COVID-19 testing.”

## How Are Schools Vulnerable?

Security risks, also known as ‘infection vectors’, are common. Attackers will adjust any attack carried out based on the weaknesses they identify within a school’s system. For example, attacks could be made possible because of a lack of multi-factor authentication or weak passwords.

There's also risk caused by:

### Virtual Private Networks (VPNs)

While VPNs are usually utilised because of their security benefits, [there are also some vulnerabilities](https://www.ncsc.gov.uk/news/alert-vpn-vulnerabilities). These allow attackers to retrieve arbitrary data which can include files containing authentication credentials. The vulnerabilities allow the attacker to connect to the VPN and change the configuration settings or gain access to internal servers.

### Phishing

Phishing is one of the most common cybersecurity risks. These are emails crafted under the guise of legitimate businesses, organisations or even internal users. However, they usually contain a malicious file or link that, when clicked, allows malware to infect a computer or server. 

### Remote Desktop Protocol (RDP)

With the increase in remote working, RDP infection vectors have become the most common opportunity for cyberattacks. 

RDP allows users to access desktop computers or servers from other devices. This requires certain configurations which can be built insecurely, allowing attackers to gain access.

Once an attacker has access, they can steal or ransom data. 

## Costs and Risks of Poor Cyber Security

Upon the occurrence of a successful cyberattack, the financial costs can be significant. An attack will include any number of the following effects:

- System downtime
- The need for new devices
- New network infrastructure
- Decreased efficiency
- Information Commissioner’s Office (ICO) fines
- Potential claims from affected third-parties

There's no rule of thumb used to determine the actual cost of an attack should it occur. Depending on the circumstance, the severity of the attack and how quick an institution can respond, costs can change dramatically. 

However, in the past, the cost of a cyberattack has been high. For businesses, in particular, an average cost of a cyberattack [can be around £2.9 million](https://www.ibm.com/uk-en/security/data-breach). [According to Infosecurity Magazine](https://www.infosecurity-magazine.com/news/cyberattack-on-mississippi-schools/?__cf_chl_jschl_tk__=ce469d30454ca1803db6dcfdb44cc3eb09f470e8-1626690068-0-AQaNPY5uniB_WVlY11C9Q69exFW708Lf_W-1Sj_PdvQWY_iHjx8U7kB0RtHR5lua0wA58ltHa_jFVsE-fitAfa6OWYdgCW5Bhw8gFuzzTYqby3nLFHl8zEOe2ULqcBCoBpvxQdOArNXRohZJykSGnu26TbWneSjdzcg5vRE5JVX2oXciJWJBPnX0RLcTptcP0E1yd0z3eoiglLfbVzJ75iqa0t9DWiKrwCFJLPDzvY_DCwVy6G-ekHCSpEdapvmdYDdsU0-h6p3lVUZyJryZ85AQmt1A-SowZr9is-2E4tDsat2A55zs5cEwe3gQ0hqPP4tYYH10W7BmLGnENr1LbgJ5LSxVhY1K4PLKOxuKE0j7kZRf5pCAFX4ydqKnDjLg2zdT1-yubTCrCUyFhYTFFbQLhBmXpZsZACrHiCx8oi0o0Sif4uF3WKDt5sZSIY9flw), one attack on a Mississippi school district [ended up costing $300,000](https://www.infosecurity-magazine.com/news/cyberattack-on-mississippi-schools/?__cf_chl_jschl_tk__=ce469d30454ca1803db6dcfdb44cc3eb09f470e8-1626690068-0-AQaNPY5uniB_WVlY11C9Q69exFW708Lf_W-1Sj_PdvQWY_iHjx8U7kB0RtHR5lua0wA58ltHa_jFVsE-fitAfa6OWYdgCW5Bhw8gFuzzTYqby3nLFHl8zEOe2ULqcBCoBpvxQdOArNXRohZJykSGnu26TbWneSjdzcg5vRE5JVX2oXciJWJBPnX0RLcTptcP0E1yd0z3eoiglLfbVzJ75iqa0t9DWiKrwCFJLPDzvY_DCwVy6G-ekHCSpEdapvmdYDdsU0-h6p3lVUZyJryZ85AQmt1A-SowZr9is-2E4tDsat2A55zs5cEwe3gQ0hqPP4tYYH10W7BmLGnENr1LbgJ5LSxVhY1K4PLKOxuKE0j7kZRf5pCAFX4ydqKnDjLg2zdT1-yubTCrCUyFhYTFFbQLhBmXpZsZACrHiCx8oi0o0Sif4uF3WKDt5sZSIY9flw) after they agreed to pay the ransom on encrypted files. 

So, the costs can be massive. Unfortunately, it's unlikely schools will have the financial ability to pay costs that hit these amounts. 

## How Schools Can Mitigate Attacks

Fortunately, schools can take pre-emptive steps to better secure their systems. These are all fairly simple additions to security. First of all, schools should utilise RDP services that include multi-factor authentication, alongside implementing anti-phishing protections, such as anti-malware. 

Secondly, there should also be quality antivirus software in place. Any and all scripting environments and macros should be disabled. 

On top of these strategies, schools can also undertake the following.

### Develop Strong Passwords

It’s very easy to fall into the trap of using the same password for multiple accounts, but this makes all of them weak in terms of security. The most secure passwords are non-dictionary words, mixtures of numbers and letters with a varied use of uppercase and lowercase.

### Carry Out Security Awareness Training

While cyber attacks evolve over time, one of the most vital avenues of risk mitigation is ensuring that staff are trained on cybersecurity awareness. What this entails is giving staff the best possible training on not only cybersecurity best practices, but also training in how to remain aware of developing risk factors. This includes the ability to:

- Spot suspicious activity
- Detect phishing attacks
- Identify areas of potential weakness within a school’s system

Similar types of training can even be given to pupils. If digital technology is something that is part of everyone’s future, it’s worth including cybersecurity education within a school’s curriculum.

### Choose Cybersecurity Champions

Within a school or other educational institution’s staff, appoint several cybersecurity champions. These individuals should be trained as above, but also work to monitor the status of an institution’s cybersecurity.

They should continue to develop their knowledge of cybersecurity best practices over time and be ready to head up and support any projects that require cybersecurity input. 

Data recovery should also be considered in mitigation strategies. For example, a school should have an up-to-date, tried-and-tested offline server backup in place. For more information, you can utilise:

- The NCSC’s ‘[Mitigating malware and ransomware attacks](https://www.ncsc.gov.uk/guidance/mitigating-malware-and-ransomware-attacks)’ guide
- The NCSC’s [Cyber Security for Schools](https://www.ncsc.gov.uk/section/education-skills/cyber-security-schools) resource page

Ultimately, a school should address the root causes of cyberattacks, such as any present infection vectors. This should include an incident response plan made up of continuous system assessment so systems are backed up often, emergency response protocols are practised and software is regularly updated.

[![New call-to-action](https://no-cache.hubspot.com/cta/default/5539127/876b4fef-c067-4618-a783-5d6ad4e38fae.png)](https://cta-redirect.hubspot.com/cta/redirect/5539127/876b4fef-c067-4618-a783-5d6ad4e38fae)

Share: [facebook-f icon ](http://www.facebook.com/share.php?u=https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1) [linkedin-in icon ](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1) [twitter icon ](https://twitter.com/intent/tweet?url=https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1) [pinterest-p icon ](http://pinterest.com/pin/create/link/?url=https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1) [envelope icon ](mailto:?body=https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1)

## Related posts

[![Cyber Attacks on Schools – Why They Are Increasing and What We Can Do?](https://blog.schoolsandacademiesshow.co.uk/hubfs/Out%20With%20the%20Old%20(Assessment)%20in%20With%20the%20New%20(Assessment)%20Rethinking%20How%20We%20Assess%20Students%20-1.png) ](https://blog.schoolsandacademiesshow.co.uk/cyber-attacks-on-schools)

[Edtech & Digital Strategies](https://blog.schoolsandacademiesshow.co.uk/tag/edtech-digital-strategies)

### [Cyber Attacks on Schools – Why They Are Increasing and What We Can Do?](https://blog.schoolsandacademiesshow.co.uk/cyber-attacks-on-schools)

[![](https://blog.schoolsandacademiesshow.co.uk/hubfs/SaAS%20Post%20Graphic.png) ](https://blog.schoolsandacademiesshow.co.uk/khipu-networks-and-company-x-unite-to-support-the-sector-with-comprehensive-cybersecurity-and-insurance-at-the-saashow)

[Edtech & Digital Strategies](https://blog.schoolsandacademiesshow.co.uk/tag/edtech-digital-strategies)

### [KHIPU Networks and Company-X Unite to Support the sector with Comprehensive Cybersecurity and Insurance at The Schools & Academies Show 2026](https://blog.schoolsandacademiesshow.co.uk/khipu-networks-and-company-x-unite-to-support-the-sector-with-comprehensive-cybersecurity-and-insurance-at-the-saashow)

[![cyber security for schools](https://blog.schoolsandacademiesshow.co.uk/hubfs/WEEK%202%20(27).png) ](https://blog.schoolsandacademiesshow.co.uk/cyber-security-for-schools-tips)

[Edtech & Digital Strategies](https://blog.schoolsandacademiesshow.co.uk/tag/edtech-digital-strategies)

### [Six Tips to Improve Cyber Security for Schools](https://blog.schoolsandacademiesshow.co.uk/cyber-security-for-schools-tips)

```json
{
  "@context" : "http://schema.org",
  "@type" : "Article",
  "author" : {
    "@type" : "Person",
    "name" : [ "Chris Callaghan" ],
    "url" : "https://blog.schoolsandacademiesshow.co.uk/author/ccallaghan"
  },
  "datePublished" : "2021-08-18T08:00:00+0000",
  "description" : "Discover the risks and costs of cyberattacks on schools and the education sector. Learn how schools can mitigate attacks and strengthen their cybersecurity measures to protect sensitive data.",
  "headline" : "School Cybersecurity: The Risks and Costs of an Attack",
  "image" : "https://blog.schoolsandacademiesshow.co.uk/hs-fs/hubfs/Screenshot%202021-07-28%20at%2016.35.48.png?width=1855&name=Screenshot%202021-07-28%20at%2016.35.48.png",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://5539127.fs1.hubspotusercontent-na1.net/hubfs/5539127/SAAS%20London%2024%20logo%20large%20colour%20no%20date-1.png"
    },
    "name" : "Govnet Communications"
  },
  "url" : "https://blog.schoolsandacademiesshow.co.uk/school-cybersecurity-the-risks-and-costs-of-an-attack-1"
}
```