UK DEPARTMENT FOR EDUCATION CONFIRMS DATA BREACH INVOLVING TWO ONLINE PORTALS

LONDON — Britain’s Department for Education has confirmed that cybercriminals accessed data connected to two online portals and are attempting to extort the government department by threatening to release the information.

The attackers claimed to have obtained more than 600,000 pieces of data, including names, email addresses, and telephone numbers.

The Department for Education clarified that the figure refers to individual lines or records of data rather than 607,000 affected people. A single person or organization may be represented across multiple entries, meaning the number cannot be used as a confirmed count of victims.

The affected systems were identified as the Department for Education Help Desk Self-Service Portal and the Turing Scheme Portal.

The Help Desk Self-Service Portal is used to support customer-service interactions with the department. The Turing Scheme Portal supports a government program that provides funding to education providers for international study and work placements.

“We have robust processes in place to protect information and took swift action to contain this incident,” a Department for Education spokesperson said. “The information involved is limited to customer service contact details relating to individuals and organisations. No other data has been accessed.”

The department said it does not consider the current risk to affected individuals to be high.

The criminals claiming responsibility identified themselves as ExfilSquad and demanded payment in exchange for withholding the stolen information.

The claim has not established the complete volume or contents of the compromised data. The Department for Education’s description remains narrower, limiting the confirmed exposure to customer-service contact information associated with individuals and organizations.

There is no indication that the attackers encrypted the affected systems. The incident appears to involve data theft followed by an extortion demand rather than the deployment of file-encrypting ransomware.

Extortion-only attacks allow cybercriminals to apply financial pressure by threatening to publish stolen information without first disrupting an organization’s systems through encryption. The absence of encryption does not eliminate the risk of identity fraud, phishing, impersonation, unwanted contact, or further attempts to exploit the exposed details.

Names, email addresses, and telephone numbers can be combined to produce convincing fraudulent messages. Recipients could be targeted through communications designed to appear connected to the Department for Education, the Turing Scheme, or education providers.

A separate cyber incident also affected the Police National Legal Database, known as PNLD.

The attackers claimed that approximately 135,000 pieces of PNLD data could identify police officers and other criminal-justice personnel through names, police-force affiliations, and professional email addresses.

The figure again refers to pieces or lines of data rather than a confirmed number of affected people.

PNLD provides an online criminal-law database supporting the 43 Home Office police forces in England and Wales, other law-enforcement organizations, and criminal-justice partners.

The affected PNLD information does not include protected data connected to criminal investigations or witnesses, according to the information currently available.

The National Cyber Security Centre confirmed that it is supporting law-enforcement authorities in response to the PNLD incident.

The relationship between the Department for Education breach and the PNLD incident has not been fully established publicly. Both were claimed by the same extortion group, but the affected systems serve different government and public-sector functions.

No government agency has confirmed that a ransom will be paid.

The British government’s existing position prevents central government departments from using public funds to pay ransomware demands. The National Cyber Security Centre and UK law enforcement also advise organizations against paying cybercriminals because payment does not guarantee that stolen information will be deleted, withheld, or returned.

The government has advanced plans for a broader legal prohibition covering ransom payments by public-sector organizations and operators of regulated critical national infrastructure. The proposed restrictions would extend beyond the existing prohibition applied to central government departments.

The Department for Education incident remains under investigation. The confirmed exposure is currently limited to customer-service contact details, while the criminals’ broader claims remain subject to verification.

Authorities have not disclosed how the portals were compromised, when the unauthorized access began, how long the attackers remained inside the systems, or whether stolen information has been transferred to other criminal groups.

The final number of affected individuals and organizations has not been determined publicly. Further notifications may be issued as investigators establish the full scope of the breach and identify the records involved.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE