Sign in Subscribe
Cyberterrorism

Phishing Attack Forces Thousands of Pupils to Attend Weekend School for Password Reset

Strategic Insights

— 1 min read

Thousands of pupils were forced to attend school at the weekend to update their passwords after the City of Edinburgh council's education department IT network was targeted by a phishing attack. The attack, identified as spear-phishing, impersonated a trusted source and threatened the security of the network. As a precaution, the council reset all passwords, including those of students, and temporarily locked them out of online revision resources for their exams. This decision was deemed "difficult but necessary" to ensure the network's security. The council is working with Police Scotland and the government to monitor its accounts and is signposting pupils to alternative study support materials.

Key Takeaways:

  • Over 2,500 pupils were forced to attend school on Saturday to have their passwords reset due to a phishing attack on the City of Edinburgh council's education department IT network.
  • The attack was identified as spear-phishing, which impersonates a trusted source to gain access to sensitive information.
  • The council's decision to reset all passwords and lock out pupils from online revision resources was deemed "difficult but necessary" to ensure the network's security.
  • The council is working with Police Scotland and the government to monitor its accounts and prevent future threats.
  • Parents were unsure whether to open a text message from the council due to concerns it may have been part of the cyberattack.
  • Jude McCorry, chief executive of the Cyber and Fraud Centre Scotland, emphasized that the cyber-hacking had not been successful.
  • The council is signposting pupils to alternative study support materials and uploading them to their websites.

Statistics:

  • Over 2,500 pupils had their passwords reset due to the phishing attack.
  • The council's education department IT network was targeted by a phishing attack.
  • 100% of affected pupils were temporarily locked out of online revision resources.
  • The council is working with Police Scotland and the government to monitor its accounts.
  • None of the council's accounts have been compromised due to the cyber-hacking attempt.

Sources:

  • "Edinburgh council forced to reset 2,500 pupils' passwords after phishing attack", The Times
  • City of Edinburgh council statement to parents via text message (9 May)
  • Statement from James Dalgleish, councillor and convener of the education, children and families committee (9 May)
  • Statement from Jude McCorry, chief executive of the Cyber and Fraud Centre Scotland (9 May)
  • Police Scotland and government officials (names and organizations not specified)

Read more