Archive · 29 Jul 2026
UK Education Department Hack Exposes 607,000 Records of Staff
A group of hackers broke into the UK Department for Education’s computer system and stole information about 607,000 people, like school leaders and university staff.
They got names, job titles, emails, and phone numbers.
The hackers said they used a group called ExfilSquad.
The department said the data is not easy to combine, so the risk is low.
They are fixing the system and working with security agencies to investigate.
Hackers breached the UK Department for Education, exposing about 607,000 records.
Exposed data included names, job titles, emails, and phone numbers of school leaders, university staff, and officials.
Attack targeted the help desk and Turing Scheme portal, claimed by the cybercriminal group ExfilSquad.
The department says the risk is low because the data sets cannot be easily linked; investigations involve the ICO, NCA, and NCSC.
Portals were repaired, telephone communications were switched, and the department confirmed no other data was accessed.
- Who
- Hackers (ExfilSquad) and UK Department for Education staff
- What
- Breach exposing 607,000 records of personal data
- Where
- United Kingdom, UK Department for Education
- Why
- To obtain personal data of education sector staff
- Affected records
- 607,000
- Data exposed
- names, job titles, email addresses, phone numbers
- Targeted systems
- Help desk, Turing Scheme portal
- Responsible group
- ExfilSquad
- Investigating agencies
- Information Commissioner’s Office, National Crime Agency, National Cyber Security Centre
- Risk level
- Low
- Response actions
- Repair portals, switch telephone communications