Harris Federation schools come under ‘vicious’ cyber attack

At least nine Croydon schools, including four large secondaries, have been affected by a malicious ransomware cyberattack this week, forcing them to shut down IT systems, email servers and even switch off their landline phone networks.

This Crystal Palace school is one of four Harris secondaries in Croydon hit by the ransomeware attack

The Harris Federation, which has its head office on Wellesley Road in Croydon, operates one of the country’s biggest academy chains, with 37,000 pupils in 50 schools around London. They have confirmed that their IT systems were subject to “a particularly vicious ransomware attack” on Saturday.

Ransomware is a type of malware, carrying a digital virus with threats to publish the victim organisation’s data or perpetually block access to its IT system unless a ransom is paid.

These latest attacks have been linked to the REvil ransomware operation, which is accused of a similar attack against computer giant Acer this month when a $50million ransom was demanded, the largest known ransom to date.

Harris has not divulged what amount of money may have been demanded in their attack, in which sensitive personal data of thousands of staff and pupils may have been at risk.

Even this South Croydon primary has had its last week of term affected by the cyber attack

After detecting the attack, the Federation disabled both its email and landline phone systems, with all phone calls being redirected to mobile phones. Pupils’ devices provided by the Harris Federation have also been disabled, in efforts to prevent the ransomware from spreading.

“This is a highly sophisticated attack that will have a significant impact on our academies but it will take time to uncover the exact details of what has or has not happened, and to resolve,” the Federation says on its website.

HThey say that they are working with the National Crime Agency, the National Cyber Security Centre and a cybersecurity firm to investigate the incident.

“We are at least the fourth multi-academy trust to have been targeted in March.”

The National Cyber Security Centre issued a warning last week of an increase in targeted ransomware attacks.

The specialist website BleepingComputer has reported a possible link to REvil, but has not been able to confirm the involvement.


  • If you have a news story about life in or around Croydon, want to publicise your residents’ association or business, or if you have a local event to promote, please email us with full details at inside.croydon@btinternet.com
  • Inside Croydon is a member of the Independent Community News Network
  • Inside Croydon works together with the Bureau of Investigative Journalism and BBC London News
  • ROTTEN BOROUGH AWARDS: Croydon was named the country’s rottenest borough in 2020 in the annual round-up of civic cock-ups in Private Eye magazine – the fourth successive year that Inside Croydon has been the source for such award-winning nominations
  • Inside Croydon: 3million page views in 2020. Seen by 1.4million unique visitors
  • Content on this site is also licensed via Ping! News. To access content for copying in full or in part,  please visit https://pingnews.uk/

About insidecroydon

News, views and analysis about the people of Croydon, their lives and political times in the diverse and most-populated borough in London. Based in Croydon and edited by Steven Downes. To contact us, please email inside.croydon@btinternet.com
This entry was posted in Crime, Education, Harris Academy Crystal Palace, Harris Academy South Norwood, Harris Academy Upper Norwood, Harris Primary Purley Way, Schools and tagged , . Bookmark the permalink.

1 Response to Harris Federation schools come under ‘vicious’ cyber attack

  1. Pingback: Data Protection News Roundup - 6th April 2021 | The Data Guardians

Leave a Reply