The recent BBC investigation which highlighted the leaking of highly confidential documents from 14 schools emphasised the need for the education sector to be extra vigilant with their cyber security.
Schools are being targeted by an organisation called the Vice Society. They are actively targeting the education sector, with 14 schools’ data listed on its site in 2022.
The organisation has built a detailed knowledge of the sector by frequently targeting schools. It chooses its victims carefully, gains initial access, steals the data and then makes its demand. The data is then leaked on a website if payment is not made.
Documents stolen from Pates Grammar School, one of the latest victims, included passport scans of pupils and parents from a school trip and staff contracts.
Prevention is always better than cure
It may seem like an obvious statement, but it is certainly true in this case. Simon Page, CCO at ILUX comments: “Once you have received a ransomware demand, it’s almost too late to mitigate. They may well say that if you pay the ransom, you will get your data back or it won’t be leaked. But in reality, you have no guarantee that this is true. If someone stole your bike and said you could have it back after transferring them £100, would you trust them to return it?”
Anti-Spam, Anti Malware, Web Protection and Firewalls will monitor for signs of suspicious behaviour on your network. Your IT provider should offer you a package of measuring and monitoring that will keep you secure. However, most new threats are unwittingly triggered by your staff falling prey to the online scammers, so it’s vital to have robust, comprehensive security and backup protection in place. Keeping one step ahead of potential threats means that your business can avoid the worst happening should a compromise occur.
Below is a list of resources that will give you some practical guidance:
Five top tips – Phil Abrie, ILUX Technical Director shares his top five tips to keep your business secure
Seven layers of cyber security – Simon Page talks through an effective layered approach and how it relates to your business
The National Cyber Security Centre (NCSC) offers comprehensive training for staff and a specific course for schools
The buyer’s guide to phishing – a simple and practical guide to help you spot phishing scams
Phil said: “The best piece of advice I can give schools is to train your staff, regularly. Make sure they are aware of threats, instil a “think before you click” philosophy and make cyber security part of their everyday routine.”
ILUX is offering all education sector organisations a review of their cyber security. We will look at all your existing layers of protection and produce a detailed report of where you are exposed and what steps you should take to enhance your security. Click here to book an initial 15-minute call to find out more.
Ali Gamble
Marketing Manager
alison.gamble@ilux.co.uk
Tel: 01480 501500
Mobile: 07872 565882
For Alison’s other articles, blogs and insights, click here.
Cyber extortion – what does it mean for your business?
Cyber extortion – what does it mean for your business? Cyber extortion is growing at an alarming rate and is a significant threat to your business, no matter its size. ALL organisations need to be aware of the risks and how to mitigate them. James Tilbury, CEO [Read more]
Ransomware threats are surging – here’s how to protect your business
Ransomware threats are surging – here’s how to protect your business Imagine turning on your computer one morning and discovering that all your crucial files – from customer data to financial records – are locked. Completely inaccessible. Then, a menacing message demands a ransom to unlock [Read more]
Preparing for the Future: Why Upgrading to Windows 11 is Crucial for Your Business
Preparing for the Future: Why Upgrading to Windows 11 is Crucial for Your Business As a business owner or director, you will, no doubt, be familiar with the constant need to balance operational costs with the need for up-to-date technology. While upgrading hardware might seem like [Read more]
