Cyber Incident Victim: Oriel High School
Date:
Mar 2015
Location:
United Kingdom
Summary
Hackers gained unauthorized access to Oriel High School's Twitter account, posting offensive content including a manipulated image of the headteacher superimposed on a muscular, tattooed model's body alongside references to a pornographic site, as well as derogatory remarks about students' physical appearance. The school promptly deactivated the compromised account, notified law enforcement, and initiated an internal investigation while publicly apologizing for the incident. Some social media users suggested student involvement, humorously noting the technical proficiency displayed in the breach. Authorities are working to determine the source of the compromise, which occurred despite restricted password access among staff.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 25, 2015, Oriel High School in Crawley, West Sussex, experienced a cybersecurity incident involving unauthorized access to its official Twitter account. Attackers compromised the account and posted inappropriate content, including a manipulated image of Headteacher Philip Stack’s face superimposed on the muscular, tattooed torso of a male model wearing tight briefs. The accompanying caption falsely claimed Stack had secured a contract with Brazzers, a known adult entertainment platform. Additional offensive tweets targeted Year 9 female students with derogatory comments about their weight. The breach was discovered when followers observed these posts, prompting immediate concern due to the account’s use for school communications.
The school’s business manager, Ryan Sallows, responsible for the Twitter account, reported the incident to police on the morning of Sunday, March 22, 2015, though the exact timing of the hack relative to this report remains unspecified. Authorities initiated an investigation into how access was obtained, noting only a limited number of school staff possessed the account credentials. Oriel High School deactivated the compromised Twitter feed following the incident and launched an internal review concurrent with the police inquiry. A public apology was posted on the school’s website acknowledging the hack and expressing regret for any offense caused. While Sallows declined to speculate on potential perpetrators, some social media users humorously suggested student involvement might reflect strong IT skills taught at the institution. The incident disrupted the school’s official communications channel, necessitating temporary suspension of Twitter operations while security measures were reviewed.