IT Systems in Schools 'Largely Restored' Following Cyber Attack
The Education Authority (EA) has confirmed that the IT systems in schools affected by a cyber attack last week have been "largely restored." All online and IT services in schools operate through the C2K network, which is managed by the EA.
The cyber attack resulted in all schools and pupils being unable to access their accounts, preventing students from logging in to obtain work or resources from their teachers during the critical period leading up to exams.
In an update issued on Friday, the EA stated that 414,000 user accounts—including those of pupils, teachers, and non-teaching staff—have been successfully reconnected, bringing the system back to near-normal operational levels.
Authorities have arrested a 16-year-old boy in connection with the cyber attack.
'Challenging Period'
In an official statement, the EA noted that the volume of calls to the C2K service desk has "now significantly reduced" and is consistent with what is typical for a school day.
"The majority of systems and services schools need to access are also now available."
The EA expressed gratitude towards "schools, staff across the EA, partners, and our service provider for their significant efforts and commitment throughout this period."
"We are also very grateful to parents/carers, pupils and school communities for their patience and cooperation throughout this challenging period," the statement said.
The education authority added that it continues to work closely with a small number of schools that were specifically targeted, where some personal data was compromised.
"We will be contacting any impacted individuals directly to provide further information, advice and guidance. They do not need to take any further action at this stage."
Details of the C2K Network Incident
On 2 April, schools received a message informing them that as part of "work to manage an IT security issue," the EA would be conducting a password reset for all users.
The EA stated that "immediate steps" were taken to contain the issue, and a full investigation is ongoing.
Following the attack, the EA implemented a comprehensive password reset across the school network as a "critical security measure."
The education body also engaged with the Information Commissioner's Office and other relevant authorities as part of its response efforts.
Last week, Eve Bremner from the EA told BBC Radio Ulster's Good Morning Ulster programme that the cyber attack was "caught early."
