Cyber Incident Victim: Myerscough College
Date:
Aug 2020
Location:
United Kingdom
Summary
A higher education institution experienced a significant malicious cyber attack disrupting online systems during exam results release, preventing students from accessing GCSE and other grades. The denial of service incident severely damaged IT infrastructure, forcing staff to manually email individual results and impacting online enrolment operations. The organization confirmed no student data breach occurred and law enforcement initiated an investigation, while staff worked extensively to mitigate disruptions through alternative communication channels.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 20, 2020, Myerscough College in Lancashire, England, experienced a significant malicious cyber attack coinciding with the scheduled release of GCSE and other exam results. The denial of service attack severely damaged all IT infrastructure, rendering systems inaccessible during a critical academic milestone. Students attempting to retrieve their results online found services unavailable, while the attack also disrupted online enrollment processes essential for ongoing academic operations. College staff confirmed no evidence of compromised student data despite the widespread technical disruption. The timing amplified operational pressures, as the college specializes in vocational education with courses spanning agriculture, equine studies, and sports, attracting hundreds of students awaiting results.
College personnel initiated emergency protocols when server restoration proved impossible, manually emailing individual results to all affected students—a labor-intensive process requiring staff to work extensively throughout the day. Communication limitations forced the college to coordinate responses via social media channels due to inoperable standard systems. A spokesperson characterized the event as among the most challenging in institutional history, publicly apologizing for impacts on students. Lancashire Police launched an investigation into the attack’s origins, though no suspect details or attribution claims emerged publicly. The incident underscored institutional vulnerabilities during high-traffic academic periods, with recovery efforts focused on restoring core systems while maintaining student services through alternative methods during the disruption.