Schools slow to recover from cyber attacks despite increased training

Schools and colleges in England are struggling to recover quickly from cyber attacks, despite more teachers receiving training against these threats, according to new data from Ofqual.

The regulator is calling on schools to ensure they are protected from malicious software, with backups in place to restore students’ coursework and other vital systems in the event of an attack.

The regulator said the proportion of teachers who received cyber security training rose to 72% in the 2024-25 academic year, up 11 percentage points from 61% the previous year.

Despite this, it found that only 55% of schools that experienced a cyber incident were able to recover immediately, compared with 63% the previous year.

The poll also found that 29% of schools had experienced a cyber security incident in the past academic year, down from 34% the year before. However, 10% reported critical damage from attacks, up from 6% previously.

According to Ofqual, one educator reported how an incident affected an entire academy trust, forcing staff to recreate lost schedules and resources. 

Another teacher reported having suffered an attack that was described as “awful” for coursework and staff planning.

Amanda Swann, Ofqual’s executive director of General Qualifications, said: “Cyber attacks can have a devastating impact on students’ academic work. Schools and colleges experiencing cyber security incidents reported losing entire classes’ coursework and facing weeks of disruption to teaching and learning.

“Protection from malware and regular data backups are the most effective defence against these threats. Schools that maintain current, accessible backups can restore systems more quickly and avoid ransomware demands.”

She added: “As schools become increasingly digital, robust cyber security measures protect both educational continuity and students’ academic futures.”