Schools & MATs

Illustration depicting a cyber attack impacting Powys County Council, symbolizing the theft of personal data from schools in

When Cyber Risk Becomes Reality: Lessons from the Powys School Attack

What Happened?

On 4 June 2026, Powys County Council confirmed that a cyber security incident had resulted in the theft of personal data belonging to pupils, staff, and others connected to schools in mid-Wales. Thirteen schools were affected by the wider incident, with personal data specifically taken from at least one. The attack was first identified in April 2026 and, according to the council, was “quickly contained”, but not before

Read more …

AI-manipulated images of smiling children, symbolizing the urgent online safety risks for schools

Guardians of Privacy: Social Media, Privacy, Children and the AI Threat

This article combines guidance from the Guardians of Privacy series, produced by Data Protection Education in collaboration with Litus Digital, with urgent new advice issued in May 2026 following confirmed blackmail attempts against UK schools using AI-manipulated images of children. Key sources include the UK Safer Internet Centre (8 May 2026) and the Internet Watch Foundation.

Read more …

Department for Education's Cyber Security Hub graphic, showing digital protection for schools against cyber threats.

What School Leaders Need to Know About the DfE's New Cyber Security Hub

Cyber attacks on schools are no longer a distant threat. The Department for Education (DfE) has just launched a dedicated Cyber Security Hub to help schools navigate this growing danger, and as a school leader, it's worth understanding exactly what it offers and why it matters.  If you were at our conference in February you were lucky enough to see a preview of the tool!

Read more …

Modern visitor management system for schools, balancing safeguarding, data protection, and DfE

Visitor Management: A Guide for Schools

Navigating the entry requirements for educational settings can sometimes be confusing for both the school and the visitor.  To ensure a smooth, secure, and legally compliant process, it is essential to balance safeguarding requirements with data protection principles and DfE guidance.

Read more …

DfE Digital Standards guidance for Wi-Fi networks, highlighting new Wi-Fi 7 and Wi

Wireless Network Standards for Schools & Colleges: What's New?

The DfE Wireless Networks is part of the DfE Digital Standards guidance and has recently been updated to include references to Wi-Fi7. You must check with this standard before you plan any Wi-Fi upgrades!

What's New?

There is a now clear guidance that specifies that any new wireless solution or upgrade must, at a minimum, meet the Wi-Fi 8 standard.

What is Wi-Fi 7?

Wi-Fi 7 provides significantly higher throughput and lower latency. In a classroom where 30 students might si

Read more …

  1. School Cyber Attack: St Anne's Catholic School
  2. Volunteer Acceptable Use Policy & Agreement
  3. Handling Subject Access Requests (SARs) - at the end of term
  4. Holiday Cheer or Cyber Fear? : Essential Pre-holiday Checks
  5. How should schools manage paper archives?
  6. Navigating the Redaction Divide: SAR or PEX?
  7. What type of request have you received? SAR? Educational Record? Or FOI?
  8. Leavers' Memorabilia
  9. Sharing photos on World Book Day: Privacy considerations
  10. The DSL’s Guide to Filtering and Monitoring
  11. The Danger of the 'Data Dump': Why more information isn't always better!
  12. Cyber Alert: Surrey and Sussex Schools Targeted by Phishing and Ransomware Attacks
  13. Parents and students covertly recording conversations
  14. New DfE AI Standards
  15. Is your IT Support Provider Compliant?
  16. The Government Cyber Action Plan
  17. School Cyber Attack: Higham Lane School Hit by Major Cyber Attack: Campus Remains Closed
  18. What does the technology in schools survey tell us?
  19. IT Support Standards for Schools and Colleges Guidance (DfE Digital Standards)
  20. Sharing information to safeguard children and young people in the education sector in the UK
  21. October 31. On the road to improving cyber resilience
  22. October 30. Cyber Support
  23. October 29. Admin Controls & Accounts
  24. October 28. Phishing: Don't Take the Bait!
  25. October 27. Passwords
  26. October 26. Physical Security of Digital Assets
  27. October 25. Server Security: Protecting Your Digital Core
  28. October 24. Backups: Your Recovery Safety Net
  29. October 23. Filtering and Monitoring
  30. October 22. Hardware: Printers
  31. October 21. Hardware: Asset Management
  32. October 20. Hardware: Safe disposal
  33. October 19. Anti-virus/anti-malware
  34. October 18. Regular Updates: Patching Against Threats
  35. October 17. Access Control: Managing User Privileges
  36. October 16. Access Control: Securing Your Digital Gateways (Wi-Fi & Networks)
  37. October 15. Access Control: Securing Your Home Office (Working From Home)
  38. October 14. Access Control : (Multi-factor authentication)
  39. We've teamed up on a podcast with the Small Business Cyber Security Guy
  40. October 13. Cyber Security Awareness
  41. October 12. Training: Empowering your human firewall
  42. October 11. Policies and Procedures: Cyber Blueprint
  43. October 10. Understanding Your Cyber Posture
  44. Time's Ticking: Windows 10 support ends in October 2025!
  45. October 9. A Guide for Education Providers
  46. October 8. How Can Your Organisation Prevent Ransomware Attacks?
  47. October 7: Under Attack: The Reality of Ransomware
  48. October 6: Cyber Action Plan and A Roadmap to Resilience
  49. October 5: Cyber Responsibilities - We're All in This Together
  50. October 4: When a Cyber Attack Hits
  51. October 3: Data Security, the Core of Protection
  52. October 2: Privacy Protection & Safeguarding Personal Data
  53. October 1: Welcome to Cyber Security Awareness Month!
  54. Nursery Cyber attack
  55. Fraud awareness from the DfE
  56. The Classroom's Dark Side: Cyber crime from the Classroom
  57. Data Breach: School sends out names and contact details in a spreadsheet.
  58. KCSIE 2025: Data Protection, AI, and Cyber Security
  59. The Online SCR Data Breach: What You Need to Know
  60. Back to School Basics for Data Protection and Cyber Security Compliance
  61. The Latest Cyber Threat: The "Murky Panda"
  62. Building a Secure School: Using the ICO Accountability Framework to Meet DfE Digital Standards
  63. Why Physical and Data Security Must Go Hand-In-Hand
  64. Digital Safeguarding: DfE announces statutory DfE Digital Standards
  65. The Data Protection Lead/Champion Role
  66. Changes to the Academy Trust Handbook 2025
  67. School closes for two days after cyber incident
  68. Social Media Day 2025
  69. How Ofsted looks at AI during inspection and regulation
  70. Data Breaches 2025 Report Highlights
  71. Not everyone needs access: The Key to Protecting Sensitive Data
  72. School cyber attack: Outwood Academy, Middlesbrough
  73. Alert: Schools receiving Microsoft File Sharing Phishing Emails
  74. School cyber attack: Framlingham College, Suffolk
  75. West Lothian Schools in Cyber Attack
  76. A Wake-Up Call for Cyber Vigilance - Danger in the Threat Landscape for Everyone
  77. New Governor Resources
  78. Are teachers using AI? 83% say its a time-saver
  79. DfE Digital Standards - narrowing the digital divide
  80. Arbor AI - On By Default
  81. DfE Guidance: Choosing a new MIS
  82. Short Guide to AI Video
  83. Safer Internet Day, Cyber Security & Data Protection
  84. The Cyber Resilience Championship
  85. The Multiple Dimensions of Supplier Due Diligence
  86. School shares sensitive pupil information as part of an FOI response
  87. Blacon High School Cyber Attack
  88. WhatsApp and FOI's: ICO Warnings
  89. New AI Guidance from the DfE
  90. What the proposed Government legislative proposal around cyber crime means
  91. DfE update to record keeping and management
  92. Update to data sharing for school immunisation programmes
  93. SLT Digital Lead Profile
  94. The role of governors in cyber security and data protection
  95. Navigating Privacy at the End of Term , Special Occasions and End of Year
  96. South East Technological University has experienced a cyber incident
  97. Safeguarding Identity in Microsoft 365: Protecting the UK Education Sector Against Cyber Threats
  98. Cyber Attack on a Special School
  99. Stealing children's data
  100. Ofqual highlights the value of cyber security training in schools
  101. Fylde Coast Academy Trust Cyber Attack This Week
  102. Calling all IT leads in schools and mult academy trusts!
  103. Ransomware cyber attack on a school in Bromley
  104. School hit by Cyber Attack
  105. DfE Digital Standards for Schools and Colleges Tracker
  106. Schools and Trusts Best Practice Area
  107. ESFA Cyber Essentials Requirement for Colleges from 2024/2025
  108. ICO Reprimands a School
  109. Out of date technology
  110. Data Retention and the Pupil File
  111. Have you assigned your SLT Digital Lead yet?
  112. What's a Cyber Incident and what should we do?
  113. Getting Started with AI (Artificial Intelligence)
  114. Cyber attack on a school during half term
  115. The rise of cyber attacks in schools are causing pupils to miss classes
  116. Cyber attack on a Trust; the aftermath
  117. School Focus: The Vale Federation | Aylesbury
  118. DfE Dealing with Subject Access Requests (SARs) Guidance
  119. Update to the Guidance on Information Sharing from the DfE
  120. Product Focus on Checklists : Initial Trust Plan
  121. Product Focus on Checklists : End of Term Checklist
  122. Product Focus on Checklists : Social Media
  123. Product Focus on Checklists : Lettings
  124. Milk Island: The secret location that allows children to view restricted content on Google Maps
  125. Free Cyber help, advice and training with the Cyber Resilience Centres
  126. The Perils of Paper: The Printing Vulnerability
  127. Product Focus on Checklists : Governors and Data
  128. Product Focus on Checklists : Site Moves
  129. Cyber attack on a University
  130. Product Focus on Checklists : Bring your own device
  131. Product Focus on Checklists : Working out of school/offsite
  132. Cyber Attack on a School
  133. Major cyber-criminal gang Lockbit brought down by UK Law Enforcement
  134. Product Focus on Checklists : Photos and video
  135. Safer Internet Day 2024
  136. Kent Councils Data Breach
  137. Free cyber training for staff
  138. DfE Digital Standards Update
  139. ClassCharts Possible Data Breach
  140. School Focus: St Bernadette's Catholic Primary School | Brighton
  141. Guardians of Privacy: 16. Social Media Checklist
  142. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  143. Guardians of Privacy: 14. Social Media and Cyber Bullying
  144. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  145. Guardians of Privacy: 12. Social Media and Going Viral
  146. Guardians of Privacy: 11. Staff Social Media Accounts
  147. Guardians of Privacy: 10. Social Media and Cookies
  148. Guardians of Privacy: 9. Social Media and Morality
  149. New Resources for Schools from the ICO
  150. Guardians of Privacy: 8. Social Media Policies
  151. Guardians of Privacy: 7. Social Media Data Retention
  152. Guardians of Privacy: 6. Posting Safely
  153. Guardians of Privacy: 5. Social Media and Consent
  154. Guardians of Privacy: 4. Social Media Access Control
  155. Guardians of Privacy: 3. Social Media Channels
  156. Guardians of Privacy: 2. Law and Regulations
  157. Phishing attacks targeting schools - alert from City of London Police
  158. The ICO reprimands a Multi Academy Trust
  159. Guidance for the use of school email and applying email retention in schools
  160. Data Protection Tips for Early Years Settings
  161. Trust Initial Plan Checklist Update
  162. Update on Advisory for Rhysida Ransomware
  163. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  164. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  165. Lettings Best Practice and Guidance
  166. The UK Online Safety Bill becomes an Act (Law)
  167. Considerations when migrating to a new MIS
  168. The importance of software updates (PaperCut vulnerability and Rhysida ransomware)
  169. Public bodies and sensitive data
  170. ICO: 10 Step guide to sharing information to safeguard children
  171. Email and Security: ICO recent guidance
  172. Social Media Policy
  173. Data Protection and Cyber Security (Inset Day) Training Ideas
  174. Changes to Microsoft Free Licensing for Schools
  175. What to do in the event of a Cyber Attack
  176. How KCSIE is linked to Cyber Strategy
  177. VICE SOCIETY - Ransomware attacks on schools
  178. Using Tags if you are a group of organisations in the DPE Knowledge Bank
  179. Cyber Insurance in the Public Sector
  180. Cyber Attack: Leytonstone School
  181. The ICO Reprimands a school
  182. Cyber Attack: Dorchester School
  183. Knowledge Bank Role Types: Admin, Staff and Trustee
  184. Cyber Attack: Wiltshire School
  185. Types of Cyber Attacks: The Insider Threat
  186. Why your data is profitable to cyber criminals
  187. Striking Data Breach
  188. January Cyber update - How Can Schools Help Prevent Cyber Attacks?
  189. FOI: Vaccination Justifications
  190. The Education sector now at highest risk of cyber attacks
  191. Schools Blocked from Using Facial Recognition Systems
  192. The Children's Code
  193. Cyber Attacks
  194. Protocol for Setting Up and Delivery of Online Teaching and Learning
  195. Class Dojo International Data Sharing
  196. Secure file transfer of files using Royal Mail
  197. Emergency contacts and consent
  198. Best Practice for Managing Photos and Video
  199. Headteacher fined for breach of data protection legislation

Search