A Biggin Hill school has closed its doors as it tackles a major cyber-attack.
Charles Darwin School, based in Jail Lane, had been experiencing IT issues but has now found the problem to be “worse than hoped” – a cyber-attack.
In a letter on its website, headteacher of the school Aston Smith has outlined that it is not yet known what data has been accessed.
The cyber-attack is in the form of Ransomware which is defined as “a type of malicious software designed to block access to a computer system until a sum of money is paid”.
As a result, the school will be closed from Monday to Wednesday next week (September 9 – 11).
This closure is so that staff devices can be removed and cleansed, giving teachers time to re-plan lessons and senior staff to create systems so that the school can continue to run.
Mr Smith has confirmed that safeguarding is the school’s priority and temporary solutions have been implemented as the systems are rebuilt.
Cloud based information with external providers has not been accessed, an example of this given by the school is Parent Pay.
A forensic investigation by a cyber security company is underway.
Until this is complete, Charles Darwin School cannot share any more details about the data breach.
The school’s data breach has been reported to the Information Commissioner’s Office (ICO) and the organisation is now conducting a full data impact assessment.
Parents are asked to be vigilant if they get an email from an unusual email address, confirming that it will never send attachment or links throughout this recovery process.
If parents need to contact the school, they are asked to do so by phone.
Staff cannot access their emails in school but phones are working for urgent reasons.
Mr Smith has told parents that the school’s understanding of the situation is that it is similar to what has recently happened to the NHS, TfL, National Rail and other organisations.
In the full statement, Mr Smith said: “As you will be aware from the letter your son/daughter brought home yesterday we had been experiencing IT issues, unfortunately this is worse than hoped in that this is a cyber -attack in the form of Ransomware.
“We do not know at this point what data has been accessed however we need to state there is the potential for all information held by the school to have been accessed.
“Our Data Protection Officer has reported the breach to the ICO (Information Commissioner’s Office) and is now conducting a full Data Impact Assessment.
“Information that is cloud based and with external providers have not been accessed, such as Parent Pay.
“We currently have a cybersecurity company completing a forensic investigation and until this in completed, we will not be able to provide any further details on the level of any data breach.
“We have been working with experts from the Inicio Trust, the cyber-security sector, data recovery specialists and the Government cyber security.
“We hope to have things restored as quickly and as safely as possible.
“I have been advised that we will be without internet, email and access to other systems in the school for an estimated 3 weeks and we appreciate your patience and understanding during this very difficult time for us.
“I have taken the decision to close the school on Monday, September 9, 10 and 11.
“This is because all staff devices have been removed to be cleansed and then time will be needed to allow teachers time to re-plan lessons for the week and senior staff to create systems for the smooth running of the school.
“Safeguarding remains our highest priority and solutions have been put in place whilst the systems are re -built.
“Satchel one should be accessible and we ask parents and students to check this regularly.
“Staff may set work and send messages this way.
“All students have had their 365 accounts disabled as a precaution.
“If you receive an email from an unusual email address we ask that you are vigilant.
“We will never send any attachments or links during the recovery process. In an earlier communication, I asked that you only contact the school if in need of an emergency by phone and this is still the case.
“Staff are unable to access emails in school but telephones are working for urgent issues.
“Please use your child’s planner to write notes to teachers who can respond back in the planner. We are unable to answer individual questions regarding this.
“Understandably there will be a lot of concerns and questions that parents may have and I will update you regularly by letter when I have further information via our website.
“Please also follow us on social media for alerts to updates for further updates.
“Unfortunately, cyber-attacks like this are happening more frequently despite having the latest security measures in place.
“Our understanding of our situation is that it is similar to what was experienced by the NHS, Transport for London, National Rail other schools and public sector departments.
“We may have to take further measures in the weeks ahead based on new information and the progress made to restore our systems.
“Once again, I understand the disruption this causes to education and families and I thank you for your support over the coming weeks.”
Comments: Our rules
We want our comments to be a lively and valuable part of our community - a place where readers can debate and engage with the most important local issues. The ability to comment on our stories is a privilege, not a right, however, and that privilege may be withdrawn if it is abused or misused.
Please report any comments that break our rules.
Read the rules here