School IT systems 'largely restored' after cyber attack

The IT systems in schools targeted in a cyber attack last week have been "largely restored" the Education Authority (EA) has said.

All online and IT systems in schools are provided through the C2K network, managed by the EA.

The attack left all schools and pupils being unable to log into their accounts, meaning pupils could not log in to get work or resources provided by their teachers in the run up to exam season.

In an update on Friday the EA said 414,000 user accounts - including pupils, teachers and non-teaching staff - have been successfully reconnected, bringing the system back to close to normal levels of operation.

A 16-year-old boy was arrested in connection with the cyber attack and was later released.

In a statement the EA said the number of calls to the C2k service desk has "now significantly reduced" and is now in line with a typical school day.

"The majority of systems and services schools need to access are also now available."

The EA thanked "schools, staff across the EA, partners, and our service provider for their significant efforts and commitment throughout this period".

"We are also very grateful to parents/carers, pupils and school communities for their patience and cooperation throughout this challenging period," the statement said.

The education body added that it is "continuing to work closely with a small number of schools that were specifically targeted, where some personal data was compromised".

"We will be contacting any impacted individuals directly to provide further information, advice and guidance. They do not need to take any further action at this stage."

Schools received a message on 2 April saying that as part of "work to manage an IT security issue" the EA would be carrying out a password reset for all users.

The EA said "immediate steps" were taken to contain the issue and a full investigation is underway.

Following the attack, the EA said a full password reset was carried out across the school network as a "critical security measure".

The education body also engaged with the Information Commissioner's Office and relevant authorities as part of its response.

Last week, Eve Bremner from the EA told BBC Radio Ulster's Good Morning Ulster programme that the cyber attack was "caught early".