Experts react as Department for Education cyber attack exposes 607,000 records

The UK Department for Education confirmed a cyber attack on its customer help desk and Turing Scheme portal, resulting in the theft of approximately 607,000 records including names, job titles, work emails, and phone numbers of school leaders, university staff, and government officials. Threat group ExfilSquad claimed responsibility and published the data online. The DfE has self-referred to the ICO and is working with the NCA and NCSC. Multiple cybersecurity experts highlight that help desks and customer-facing portals are consistently exploited entry points, that the stolen contact data enables highly targeted spear-phishing and social engineering campaigns, and that the education sector is among the most attacked globally. Experts call for stronger identity verification at help desks, multi-factor authentication, least-privilege access, and greater transparency from the DfE about whether basic standards like Cyber Essentials were met — particularly given the department sets cyber expectations for schools and colleges it regulates.

Source: https://www.itsecurityguru.org/2026/07/30/experts-react-as-dfe-cyber-attack-exposes-607000-records. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.