Northern Ireland Education Authority Confirms Personal Data Access in School Cyberattack
Summary
Forensic investigators confirmed targeted access to personal data at a small number of Northern Ireland schools. The incident, identified April 10, 2026, is contained; investigation and C2k system recovery continue.
Key points
- Forensic investigators confirmed targeted access to personal data linked to a small number of schools.
- The incident was identified on April 10, 2026; the full extent of affected information remains unknown.
- Authorities said there was no evidence of data exfiltration or corruption in initial findings.
- The Education Authority says the incident is contained, and work continues to reconnect affected schools to the C2k system.
- The Police Service of Northern Ireland and the Information Commissioner's Office are involved in the investigation.
- Affected schools and individuals are being notified; users were advised to reset their C2k passwords.
Article Details
- Victim Organization
- Education Authority
- Incident Type
- Targeted cyberattack resulting in unauthorized access to personal data at a small number of schools
- Data Types Exposed
- Personal data
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The incident was reported as contained. Work is ongoing to reconnect affected schools to the C2k system and restore normal operations; users were urged to reset their C2k passwords.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed