Wootton Upper School

Wootton Upper School operates as an academy trust that manages several schools across the United Kingdom. Its primary function is to provide state‑funded education to students within the communities it serves. As an academy trust, it receives direct funding from the government and has autonomy over its curriculum and operational decisions. The trust serves a diverse pupil population, offering a range of academic and vocational programmes typical of the UK secondary education sector. Its organisational structure places it within the broader network of academy trusts that have been established to improve school performance and increase local accountability. While specific enrolment figures or geographic spread are not disclosed in the available sources, the trust’s status as a multi‑school entity indicates a notable footprint within the regional education landscape.

In July 2022, the trust became the target of a ransomware attack carried out by the Hive group, a criminal organisation known for targeting educational and healthcare institutions. The attackers encrypted systems and demanded a payment of £500,000, asserting that the amount matched the trust’s cyber insurance coverage. They claimed to have exfiltrated sensitive data, including student medical records, banking information, and home addresses, and threatened to publish the material unless the ransom was paid. In response, the trust engaged third‑party cybersecurity specialists to rebuild its IT infrastructure and to assess the extent of any data breach. During the incident, parents received direct communications from the attackers urging them to pressure the trust into paying the ransom, illustrating the group’s extortion tactics. The Hive group’s reputation for leveraging stolen insurance details to justify demands aligns with the narrative presented in this attack. The incident prompted the trust to review its security posture and to implement additional safeguards to protect student information.