Guildford County School

Guildford County School operates as a secondary school providing education to students in the Guildford area of the United Kingdom. The organisation is also referred to as Guildford County School District, indicating its administrative scope within the local education system. Its core product is the delivery of secondary-level curriculum, encompassing academic subjects and pastoral care for pupils. As a school, it holds statutory responsibilities for safeguarding the welfare of its students, including the maintenance of sensitive records such as safeguarding reports. The institution’s headquarters are located in the United Kingdom, placing it under the jurisdiction of UK education authorities and data protection legislation. Teaching and learning activities are supported by IT systems that facilitate communication with parents, staff, and external platforms.

In January 2023, the school was targeted by a ransomware attack attributed to the cybercriminal group Vice Society, which compromised sensitive data including safeguarding reports detailing vulnerable students’ information. The attack disrupted the school’s IT infrastructure, affecting phone lines and communication tools such as ParentMail and Microsoft Teams, yet the institution continued to operate using contingency measures. Attackers subsequently published the stolen files on a leak site as part of an extortion attempt, a tactic consistent with previous ransomware campaigns against educational organisations. In response, the school engaged cybersecurity professionals, restored systems from backups, and notified the Information Commissioner’s Office of the breach. Restoration efforts were undertaken while seeking to limit further data loss, reflecting a structured incident response aligned with recommended practices. The incident highlights the broader trend of increasing ransomware threats facing schools and colleges across the United Kingdom.