Myerscough College

Summary

A higher education institution experienced a significant malicious cyber attack disrupting online systems during exam results release, preventing students from accessing GCSE and other grades. The denial of service incident severely damaged IT infrastructure, forcing staff to manually email individual results and impacting online enrolment operations. The organization confirmed no student data breach occurred and law enforcement initiated an investigation, while staff worked extensively to mitigate disruptions through alternative communication channels.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 20, 2020, Myerscough College in Lancashire, England, experienced a significant malicious cyber attack coinciding with the scheduled release of GCSE and other exam results. The denial of service attack severely damaged all IT infrastructure, rendering systems inaccessible during a critical academic milestone. Students attempting to retrieve their results online found services unavailable, while the attack also disrupted online enrollment processes essential for ongoing academic operations. College staff confirmed no evidence of compromised student data despite the widespread technical disruption. The timing amplified operational pressures, as the college specializes in vocational education with courses spanning agriculture, equine studies, and sports, attracting hundreds of students awaiting results.

College personnel initiated emergency protocols when server restoration proved impossible, manually emailing individual results to all affected students—a labor-intensive process requiring staff to work extensively throughout the day. Communication limitations forced the college to coordinate responses via social media channels due to inoperable standard systems. A spokesperson characterized the event as among the most challenging in institutional history, publicly apologizing for impacts on students. Lancashire Police launched an investigation into the attack’s origins, though no suspect details or attribution claims emerged publicly. The incident underscored institutional vulnerabilities during high-traffic academic periods, with recovery efforts focused on restoring core systems while maintaining student services through alternative methods during the disruption.

Sources

Sources available to members: 1 source.