Targeted Cyberattack on Northern Ireland Schools Exposes Personal Data

**Executive summary:** A targeted cyberattack identified on April 10, 2026, led to unauthorized access to personal data at a small number of schools managed by the Education Authority; forensic analysis confirmed targeted access, containment measures have been implemented, law enforcement (Police Service of Northern Ireland) and the ICO are involved, an arrest has been made, affected individuals are being notified, and efforts continue to restore systems and investigate the breach.