EA confirms cyber attack on C2k school system as access suspended across Northern Ireland

The Education Authority has confirmed that Northern Ireland’s C2k school system has been the target of a cyber attack, with access to the network currently unavailable following emergency action to contain the incident.

The development is expected to affect schools, staff and pupils across Northern Ireland, with the authority acknowledging particular concern for students preparing for exams or completing coursework during the Easter period.

In a statement issued on Friday, 3 April, the EA said immediate steps were taken as soon as the breach was identified.

Immediate action taken after attack detected

The authority said the system managers, Capita, moved quickly to contain the issue and begin a full investigation.

An EA spokesperson said:

“We can confirm that the C2k school system has been the target of a cyber attack.”

They added: “As soon as we became aware of the incident, the system managers, Capita, took immediate steps to contain the issue and begin a full investigation.”

As part of the response, a full password reset has been implemented across the school network.

The EA said this was a critical security measure designed to protect the integrity of the system and safeguard users.

The spokesperson said: “As a critical security measure, a full password reset has been carried out across the school network. Capita is conducting further security tests, and access to the system is currently unavailable.”

At present, users are unable to access the system while those checks continue.

Data impact not yet confirmed

Officials said the investigation remains at an early stage and it is not yet known whether any personal data has been compromised.

The EA said it is treating the matter with the utmost seriousness and has already begun engaging with regulators and authorities as part of its response.

The statement continued: “The investigation is at an early stage, and we are not yet able to confirm whether any personal data has been affected.”

It added: “We are taking this very seriously and are engaging with the Information Commissioner’s Office and relevant authorities as part of our response.”

The involvement of the Information Commissioner’s Office suggests the incident is being assessed not only from a technical security perspective, but also in relation to potential data protection implications should any personal information prove to have been accessed.

Concern for pupils during Easter study period

The outage comes at a particularly sensitive time in the academic calendar, with many pupils using the Easter break to revise for exams and complete coursework.

The EA directly acknowledged the disruption this may cause for students and school staff.

The spokesperson said: “We understand and sincerely apologise for the impact on staff and pupils; particularly pupils who may be preparing for exams or completing coursework during the Easter period.”

They added: “We are working hard to resolve this problem as soon as possible.”

For many schools, the C2k system forms a central part of digital learning, communications, coursework access and administrative functions, meaning the temporary loss of access is likely to have immediate operational consequences.

Access restoration and next steps

The EA said further updates will be issued as soon as arrangements are in place for restoring access to the network.

This will include details on how users can regain access and the process for password resets.

The spokesperson said: “We will update users on the arrangements for regaining access as soon as possible, including arrangements for password resets.”

They added: “These steps are essential in the context of maintaining the integrity and security of the system and the safety of all users.”

Further updates are expected to be published through the Education Authority’s official channels, including its website and social media platforms.

The statement concluded: “We will continue to share updates at www.eani.org.uk and on our social media channels.”

---

At a glance:

• Education Authority has confirmed a cyber attack on the C2k school system

• System managers Capita acted immediately to contain the incident

• Access to the network is currently unavailable

• A full password reset has been carried out across the school network

• It is not yet known whether personal data has been affected

• EA is engaging with the Information Commissioner’s Office and relevant authorities

• Disruption may affect staff and pupils, including those preparing for exams and coursework over Easter

• Further updates are expected on restoring access