Holy Family Roman Catholic and Church of England College

Holy Family RC + CE College is a Roman Catholic and Church of England college located in the United Kingdom. As an educational institution, it provides schooling to children and young people, maintaining records that include student personal data, special educational needs information, staff employment details, and financial information. The college’s dual religious affiliation reflects a joint governance arrangement between the Catholic Church and the Church of England. Its headquarters are situated in the UK, placing it within the national education framework.

The college’s reliance on digital systems for administration, teaching, and communication was highlighted in September 2022 when the Vice Society hacking group conducted a cyberattack that compromised its IT networks. The breach resulted in the exfiltration and subsequent leak of sensitive data, including children’s SEN records, passport scans, staff contracts, and financial details. After the attackers’ ransom demand was not met, the stolen information was published on the dark web, prompting operational disruptions that forced the college to use alternative communication channels. The attack also affected several other educational institutions across the United Kingdom, indicating a broader targeting pattern by the threat actor. Forensic investigators were engaged to restore systems and assess the breach, while the Information Commissioner’s Office and police launched investigations into the incident. The incident highlighted systemic vulnerabilities in educational institutions' cybersecurity defenses against financially motivated threat actors.