The fallout from the recent Education Authority cyberattack continues to affect schools in Northern Ireland, as efforts to restore access to critical IT systems remain ongoing. Following the cyberattack on Education Authority systems last Thursday, thousands of pupils and staff were left unable to log in to essential platforms used for coursework, revision, and communication, particularly concerning exam season.

The Education Authority (EA), which manages the C2K network providing all online services to schools in Northern Ireland, reported on Sunday that it is making “good progress” in safely restoring access. However, the scale of the Education Authority cyberattack means recovery is complex and time-consuming.

Restoration Efforts Underway After Cyberattack

The EA confirmed that teams have been working throughout the weekend to address the impact of the cyberattack on Education Authority systems. Their immediate focus has been on restoring services in a phased manner, starting with post-primary schools. The authorities noted that systems must be brought back online “safely and securely.”

All IT services in schools in Northern Ireland are delivered through the centrally managed C2K network, meaning the disruption was widespread. Students were unable to access study materials, submit assignments, or communicate with teachers, an issue that has caused significant concern, especially for those preparing for upcoming exams, reported the BBC. 

Password Reset Described as ‘Critical Security Measure’ 

On Thursday, schools received notification that, due to an IT security issue linked to the Education Authority cyberattack, all users would be required to reset their passwords. The EA stated that “immediate steps” were taken to contain the threat, including initiating a full investigation into the incident. 

A complete password reset across the network was implemented as what the EA described as a “critical security measure.” This step was necessary to protect user accounts across all schools in Northern Ireland following the cyberattack on the Education Authority infrastructure.

Despite these actions, the EA has not yet confirmed whether any personal data was compromised. The organization is currently working with the Information Commissioner’s Office and other relevant authorities to determine the extent of the breach and ensure compliance with data protection requirements. 

Schools Manage Disruption and Recovery 

Individual schools have begun managing the impact of the Education Authority cyberattack at a local level. At Sullivan Upper School in Holywood, County Down, principal Craig Mairs informed parents that access had been restored for senior teaching and non-teaching staff by Sunday morning. 

However, Mairs explained that resetting access for all users is a “very significant task,” as each pupil and staff member’s password must be updated individually. The process is being carried out in stages, organized by year groups. 

To support students affected by the cyberattack on Education Authority systems, the school announced it would open on Easter Monday specifically for pupils in Years 11 to 14 who are preparing for exams. Staff will be available on-site between 09:30 and 11:30 BST to assist with password resets before the new term begins. 

Meanwhile, passwords for younger pupils in Years 8 to 10 will be addressed after the Easter break, reflecting the prioritization of exam-year students across schools in Northern Ireland.