Northern Ireland Schools Face Ongoing Disruption Following Education Authority Cyberattack
A cyberattack on the Education Authority (EA) in Northern Ireland has left thousands of pupils and staff unable to access critical IT systems, disrupting coursework, revision, and communication ahead of exam season. The attack, detected last Thursday, targeted the C2K network a centralized platform managing all online services for schools across the region.
The EA confirmed that recovery efforts are underway, with teams working through the weekend to restore systems in a phased approach, prioritizing post-primary schools. While progress has been made, the scale of the incident has made restoration complex, requiring a "safe and secure" process. The disruption has prevented students from accessing study materials, submitting assignments, and contacting teachers, raising concerns for those preparing for exams.
As a critical security measure, the EA mandated a full password reset across the network, though it has not yet confirmed whether personal data was compromised. The organization is collaborating with the Information Commissioner’s Office and other authorities to assess the breach and ensure compliance with data protection regulations.
At the local level, schools are managing the fallout individually. Sullivan Upper School in Holywood reported that senior staff regained access by Sunday, though resetting passwords for all users remains a significant task. To mitigate disruption, the school will open on Easter Monday for exam-year students (Years 11–14) to assist with password resets before the new term. Younger pupils (Years 8–10) will have their access restored after the Easter break.
The incident underscores the widespread impact of cyber threats on education infrastructure, with recovery efforts expected to continue in the coming days.
Source: https://thecyberexpress.com/education-authority-cyberattack-ni-schools/
Sullivan Alumni Association cybersecurity rating report: https://www.rankiteo.com/company/sullivan-upper-school
"id": "SUL1775464051",
"linkid": "sullivan-upper-school",
"type": "Cyber Attack",
"date": "4/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Thousands of pupils and staff',
'industry': 'Education',
'location': 'Northern Ireland',
'name': 'Education Authority (EA)',
'size': 'Large (serves all schools in Northern '
'Ireland)',
'type': 'Government/education authority'},
{'customers_affected': 'Students (Years 8-14)',
'industry': 'Education',
'location': 'Holywood, Northern Ireland',
'name': 'Sullivan Upper School',
'type': 'School'}],
'customer_advisories': 'Password reset required; schools managing access '
'individually',
'date_detected': '2024-04-04',
'description': 'A cyberattack on the Education Authority (EA) in Northern '
'Ireland has left thousands of pupils and staff unable to '
'access critical IT systems, disrupting coursework, revision, '
'and communication ahead of exam season. The attack targeted '
'the C2K network, a centralized platform managing all online '
'services for schools across the region. Recovery efforts are '
'underway, but the disruption has prevented students from '
'accessing study materials, submitting assignments, and '
'contacting teachers.',
'impact': {'brand_reputation_impact': 'Potential reputational damage to '
'Education Authority',
'downtime': 'Ongoing',
'operational_impact': 'Disruption to coursework, revision, and '
'communication; inability to access study '
'materials or submit assignments',
'systems_affected': 'C2K network, online education services'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber incident report'}],
'regulatory_compliance': {'regulatory_notifications': 'Information '
'Commissioner’s Office'},
'response': {'communication_strategy': 'Collaboration with Information '
'Commissioner’s Office and other '
'authorities; updates to schools',
'containment_measures': 'Full password reset across the network',
'incident_response_plan_activated': 'Yes',
'recovery_measures': 'Teams working through the weekend; schools '
'opening early for exam-year students',
'remediation_measures': 'Phased restoration of systems, '
'prioritizing post-primary schools'},
'stakeholder_advisories': 'Collaboration with authorities; phased recovery '
'plan',
'title': 'Northern Ireland Schools Face Ongoing Disruption Following '
'Education Authority Cyberattack',
'type': 'Cyberattack'}