School‑network breach in Northern Ireland

A 16-year-old boy was arrested after a cyberattack on Northern Ireland’s school network, and the Education Authority now says personal data was accessed. (bbc.co.uk) Police Service of Northern Ireland detectives arrested the teenager in the Portadown area on Wednesday, April 15, on suspicion of offences under sections 1, 2 and 3A of the Computer Misuse Act 1990. Police said he was later released pending further inquiries. (silicon.co.uk) The attack hit the C2k system, the shared information technology network used by schools across Northern Ireland, after police received a report of network intrusion activity involving the Education Authority on Thursday, April 2. The breach forced systems offline and triggered a region-wide password reset. (belfasttelegraph.co.uk) On April 15, the Education Authority said forensic investigators had confirmed a targeted attack on a small number of schools and “specific and targeted access” to personal data. The authority said it learned on Friday afternoon, April 10, that personal information had been compromised. (eani.org.uk) That changed the public picture from the first statement on April 3, when officials said there was no evidence at that stage of data being taken or corrupted. The Education Authority said the later finding came after a longer forensic review across multiple systems. (eani.org.uk) The disruption landed at the start of the Easter break, when many pupils were using online materials for coursework and exam revision. Early reporting said the outage blocked access to accounts, teacher-posted documents and other school resources just weeks before General Certificate of Secondary Education and A-level exams. (belfasttelegraph.co.uk) The Education Authority said its immediate priority is notifying the individuals and schools affected, with guidance from police and the Information Commissioner’s Office. It has not publicly identified what categories of personal data were accessed, saying it does not want to compromise the investigation. (eani.org.uk) Officials say the incident is contained and that extra security measures were deployed at the beginning of April. The remaining work is restoring full access to C2k and contacting the people whose data was caught in the breach. (eani.org.uk)