www.computerweekly.com/news/3666…
The UK Department for Education confirmed a significant data breach after the threat actor ExfilSquad used social engineering against its external-facing helpdesk (used by schools, universities and local authorities). Approximately 607,000 records containing names, job titles, email addresses and phone numbers of government officials, school leaders and university staff were stolen.
The Turing Scheme portal was also affected. ExfilSquad claimed responsibility and posted samples on the dark web. The department has taken systems offline, referred itself to the Information Commissioner’s Office, and is working with the National Cyber Security Centre and National Crime Agency. Officials state the data is limited to customer-service contact details and the risk to individuals is considered low.
