Paul Cahill, Data Breach Solicitor at Fletchers Data Claims

During the UK’s enforced lockdown due to the COVID-19 pandemic, research has suggested that there has been a surge in malicious apps, websites, phishing emails and messages designed to trick the public and steal confidential or sensitive information.

Indeed, further data from The Chartered Trading Standards Institute has even suggested that the UK has been the most severely targeted country for COVID-19 related phishing emails.

Attacks on sensitive student data

While COVID-19 cyber attacks give the public additional reason to be wary with their personal data, the issue goes far beyond COVID-19 related scams for the education sector.

The National Cyber Security Centre (NCSC) yesterday (17 Sept) issued an alert to the academic sector. Cyber security experts have stepped up support for UK schools, colleges, and universities following a spate of online attacks, such as the Blackbaud data breach, which have the potential to de-rail their preparations for the new term, allow sensitive personal records to potentially fall into the hands of cybercriminals.

In recent months, we have seen numerous data breaches affecting universities. Whilst the most common reason for a breach is human error, sophisticated hacks from cyber criminals are unfortunately a familiar sight in this sector. Universities not only hold the personal information of their students, they often carry out government-commissioned research; making the risk not only a personal one, but a national one too.

A lack of investment in IT security, coupled with the false assurance of being ‘of little interest’ to attackers, makes the education sector an appealing target for cyber criminals.

So what can universities and colleges do to protect themselves from hackers?

Here are my top 5 tips on how universities could educate their staff and students to protect their personal data from malicious cyber attacks:

1. Train staff & students on phishing

Phishing is becoming more and more advanced. Every day, innocent people are lured into clicking false links and handing over personal or financial information as a result of phishing.

Phishing is a type of online scam where criminals send a communication that appears to be from a legitimate company asking for the user to provide sensitive information. People can be targeted through email or text message, which generally have a sense of ‘urgency’ about them – scaring those affected into believing they must share the requested information quickly.

Training staff and students on how to spot a phishing email is a good way to help prevent cyber attacks. There are a few key things to watch out for: including poor use of language, incorrect spellings, generalised greetings and incorrect URL pathways. General tips to follow include:

  • Never clicking on a link within an email that you weren’t expecting
  • Be aware that email addresses can be spoofed, even if they appear to be from a familiar organisation
  • Hover the mouse over links before clicking them to see where they lead to
  • Always log into accounts using your browser; not through a link in an email or text message

2. Tighten up accessibility

Keeping a firm hand on exactly who has access to your network and validating all user credentials on a regular basis will help to tighten up security. Without this, attackers can use authenticated profiles to access your database and steal information. This is a key part of cyber security, and will go a long way to ensuring the overall security health of your faculty. Some key steps to follow include:

  • Ensuring that any new users are who they say they are. This means also granting a level of access appropriate to that person
  • Implementing a suitable authentication process for new and current users
  • Reviewing your authentication process on a regular basis to test for security gaps and accuracy
  • When a service supports “two factor authentication” (2FA), always add it to your account security to protect accounts from password theft
  • Always disable accounts and access when they are no longer required

3. Invest in good cyber hygiene

Universities and other higher education establishments hold an awful lot of personal information relating to their student body. From postal addresses, email addresses and phone numbers to unique student numbers, date of birth and gender. There may also be personal information on file relating to the background of certain students, any changes in circumstances or exam results. Basic cyber hygiene is therefore key to keeping this confidential information safe.

This includes patch management software, antivirus and firewall management. Ensuring that all security software is regularly updated and tested will help to create a good foundation for cyber security.

4. Update the network design

Establishing a good security system can be tricky for universities, particularly when ease of information-sharing is compromised internally. Updating the network design can help to facilitate this. Typically, university networks tend to contain a crossover of smaller networks for each department. Although this offers freedom for staff and students within these departments, it also presents a challenge when it comes to protecting data.

When designing a computer system that is both secure and functional, universities should pay attention to the following steps:

  • Confirm all network elements and ensure there are no defensive ‘blind spots’
  • Attackers can only penetrate what they can reach, so make your data difficult to access
  • Understand your own system, so you can spot suspicious activity as it happens

5. Act fast – minimise damage

In reality, no system is ever entirely safe from hackers. Taking all the right steps to protect personal and sensitive data, and making the network difficult for hackers to access, is an absolute must. But cyber attacks are always evolving, and more and more advanced techniques are being developed.

It is key for universities to understand their networks, understand usual user behaviour, educate staff and students on data safety, and to act fast if any red flags are spotted. Having a crisis management plan in place and working closely with your security team will help to minimise any damage and disruption caused by a cyber attack.

Paul Cahill, Data Breach Solicitor at Fletchers Data Claims

You may also be interested in these articles:

Sponsored Video


Upcoming FE Events

Advertiser Skyscrapers

Newsroom Activity

FE News: The Future of Education News Channel shared a video in channel. 11 hours 11 minutes ago

Zoom in on Apprenticeships

Georgia chats with Victoria Gage, Careers Hub Lead at Devon County Council.

FE News: The Future of Education News Channel shared a video in channel. 11 hours 13 minutes ago

Future Skills Centre

Welcome to the Future Skills Centre. A fully refurbished venue operated by Exeter College in partnership with Devon County Council, the Future...

FE News: The Future of Education News Channel had a status update on Twitter 11 hours 13 minutes ago

Activate Learning students are chosen to appear in nationwide showcase: Activate Learning (@Activate_Learn) is exci…
View Original Tweet

Latest Education News

Further Education News

The FE News Channel gives you the latest education news and updates on emerging education strategies and the #FutureofEducation and the #FutureofWork.

Providing trustworthy and positive Further Education news and views since 2003, we are a digital news channel with a mixture of written word articles, podcasts and videos. Our specialisation is providing you with a mixture of the latest education news, our stance is always positive, sector building and sharing different perspectives and views from thought leaders, to provide you with a think tank of new ideas and solutions to bring the education sector together and come up with new innovative solutions and ideas.

FE News publish exclusive peer to peer thought leadership articles from our feature writers, as well as user generated content across our network of over 3000 Newsrooms, offering multiple sources of the latest education news across the Education and Employability sectors.

FE News also broadcast live events, podcasts with leading experts and thought leaders, webinars, video interviews and Further Education news bulletins so you receive the latest developments in Skills News and across the Apprenticeship, Further Education and Employability sectors.

Every week FE News has over 200 articles and new pieces of content per week. We are a news channel providing the latest Further Education News, giving insight from multiple sources on the latest education policy developments, latest strategies, through to our thought leaders who provide blue sky thinking strategy, best practice and innovation to help look into the future developments for education and the future of work.

In Jan 2021, FE News had over 173,000 unique visitors according to Google Analytics and over 200 new pieces of news content every week, from thought leadership articles, to the latest education news via written word, podcasts, video to press releases from across the sector, putting us in the top 2,000 websites in the UK.

We thought it would be helpful to explain how we tier our latest education news content and how you can get involved and understand how you can read the latest daily Further Education news and how we structure our FE Week of content:

Main Features

Our main features are exclusive and are thought leadership articles and blue sky thinking with experts writing peer to peer news articles about the future of education and the future of work. The focus is solution led thought leadership, sharing best practice, innovation and emerging strategy. These are often articles about the future of education and the future of work, they often then create future education news articles. We limit our main features to a maximum of 20 per week, as they are often about new concepts and new thought processes. Our main features are also exclusive articles responding to the latest education news, maybe an insight from an expert into a policy announcement or response to an education think tank report or a white paper.

FE Voices

FE Voices was originally set up as a section on FE News to give a voice back to the sector. As we now have over 3,000 newsrooms and contributors, FE Voices are usually thought leadership articles, they don’t necessarily have to be exclusive, but usually are, they are slightly shorter than Main Features. FE Voices can include more mixed media with the Further Education News articles, such as embedded podcasts and videos. Our sector response articles asking for different comments and opinions to education policy announcements or responding to a report of white paper are usually held in the FE Voices section. If we have a live podcast in an evening or a radio show such as SkillsWorldLive radio show, the next morning we place the FE podcast recording in the FE Voices section.

Sector News

In sector news we have a blend of content from Press Releases, education resources, reports, education research, white papers from a range of contributors. We have a lot of positive education news articles from colleges, awarding organisations and Apprenticeship Training Providers, press releases from DfE to Think Tanks giving the overview of a report, through to helpful resources to help you with delivering education strategies to your learners and students.


We have a range of education podcasts on FE News, from hour long full production FE podcasts such as SkillsWorldLive in conjunction with the Federation of Awarding Bodies, to weekly podcasts from experts and thought leaders, providing advice and guidance to leaders. FE News also record podcasts at conferences and events, giving you one on one podcasts with education and skills experts on the latest strategies and developments.

We have over 150 education podcasts on FE News, ranging from EdTech podcasts with experts discussing Education 4.0 and how technology is complimenting and transforming education, to podcasts with experts discussing education research, the future of work, how to develop skills systems for jobs of the future to interviews with the Apprenticeship and Skills Minister.

We record our own exclusive FE News podcasts, work in conjunction with sector partners such as FAB to create weekly podcasts and daily education podcasts, through to working with sector leaders creating exclusive education news podcasts.

Education Video Interviews

FE News have over 700 FE Video interviews and have been recording education video interviews with experts for over 12 years. These are usually vox pop video interviews with experts across education and work, discussing blue sky thinking ideas and views about the future of education and work.


FE News has a free events calendar to check out the latest conferences, webinars and events to keep up to date with the latest education news and strategies.

FE Newsrooms

The FE Newsroom is home to your content if you are a FE News contributor. It also help the audience develop relationship with either you as an individual or your organisation as they can click through and ‘box set’ consume all of your previous thought leadership articles, latest education news press releases, videos and education podcasts.

Do you want to contribute, share your ideas or vision or share a press release?

If you want to write a thought leadership article, share your ideas and vision for the future of education or the future of work, write a press release sharing the latest education news or contribute to a podcast, first of all you need to set up a FE Newsroom login (which is free): once the team have approved your newsroom (all content, newsrooms are all approved by a member of the FE News team- no robots are used in this process!), you can then start adding content (again all articles, videos and podcasts are all approved by the FE News editorial team before they go live on FE News). As all newsrooms and content are approved by the FE News team, there will be a slight delay on the team being able to review and approve content.

 RSS IconRSS Feed Selection Page