DfE Helpdesk Data Breach Exposes Over 600,000 Records

The Department for Education (DfE) confirmed a data breach affecting over 607,000 records, attributed to a social engineering attack by the threat group ExfilSquad. The stolen data includes full names, job titles, telephone numbers, and email addresses of government officials and school leaders. The breach targeted the DfE's helpdesk systems and involved records from the Turing Scheme database. The DfE has referred the incident to the Information Commissioner's Office and is collaborating with the National Crime Agency and National Cyber Security Centre. The department stated that the data protection risk is considered low, as no sensitive financial information was compromised. The DfE took affected systems offline to contain the breach and expects normal operations to resume shortly. This incident follows a previous data leak involving the DfE reported last year, raising concerns about the department's cybersecurity measures.

Key Points: • Over 607,000 records were stolen in a DfE data breach linked to ExfilSquad. • The breach involved names, job titles, and contact details of school leaders and officials. • The DfE is working with law enforcement and has taken systems offline to mitigate the impact.