Surge in Cyberattacks Targeting UK Educational Institutions and Businesses

In 2025, a significant increase in cyberattacks has been reported across UK educational institutions and businesses. According to a government survey, 91% of universities, 85% of further education colleges, and 60% of secondary schools experienced at least one cyberattack in the past year. In contrast, 43% of surveyed businesses reported similar breaches. The survey included responses from over 2,000 businesses and various educational institutions, indicating a troubling trend in the frequency and severity of cyber threats.

Cyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affected

The survey revealed that primary schools were also affected, with 44% reporting hacking attempts. Extrapolating these findings suggests that over 610,000 businesses and 61,000 charities may have been targeted in the last year. Notably, the Jaguar Land Rover (JLR) breach exemplified the potential fallout from such attacks, leading to significant operational disruptions and financial losses.

Cyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affected

The education sector appears particularly vulnerable to cyber threats. Toby Lewis, Global Head of Threat Analysis at Darktrace, noted that educational institutions are often caught in the "dragnet of cybercrime attacks," with many incidents stemming from opportunistic targeting rather than deliberate attacks. Factors contributing to this vulnerability include limited funding for state schools and a lack of cybersecurity expertise, as well as the open nature of university networks designed for academic collaboration.

6 out of 10 UK secondary schools reported cyber attack in last yearThe GuardianParkMobile breach settlement, UK schools more vulnerableCyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affectedThe Guardian

Phishing emails were identified as the most common attack vector, aiming to deceive recipients into revealing sensitive information. Ransomware attacks have also become prevalent, where attackers encrypt systems and demand payment for data recovery. The Department for Education has acknowledged these risks and is working with the UK’s National Cyber Security Centre to provide support and training for schools.

The Guardian6 out of 10 UK secondary schools reported cyber attack in last yearParkMobile breach settlement, UK schools more vulnerableCyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affectedThe Guardian

Despite government initiatives, there are calls for additional funding and resources to bolster cybersecurity measures in schools. James Bowen, assistant general secretary at the National Association of Head Teachers, emphasized the need for more support to help school leaders effectively respond to cyber threats. Meanwhile, the government is considering proposals to ban public bodies from making ransom payments, aiming to deter future attacks.

The Guardian6 out of 10 UK secondary schools reported cyber attack in last yearParkMobile breach settlement, UK schools more vulnerableCyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affectedThe Guardian

While some experts suggest that these cyberattacks may be linked to geopolitical tensions, particularly Russia's ongoing conflict with Ukraine, others indicate that many attacks are perpetrated domestically by English-speaking teenagers. James MacColl from the Royal United Services Institute noted a trend where local hackers lease ransomware from Russian cybercriminals, targeting high-profile victims for notoriety rather than solely financial gain.

Cyberattacks hit 91% of universities and 43% of businesses in last 12 months in the UK — survey suggests more than 600,000 businesses, 61,000 charities affected

The rise in cyberattacks on UK educational institutions and businesses underscores the urgent need for enhanced cybersecurity measures. As the landscape of cyber threats continues to evolve, both sectors must prioritize robust defenses to protect sensitive data and maintain operational integrity. The ongoing discussions around government support and potential policy changes will be crucial in shaping the future of cybersecurity in the UK.

6 out of 10 UK secondary schools reported cyber attack in last year