Carmel College

Carmel College is a sixth form college located in the United Kingdom, providing post-secondary education to students typically aged 16 to 19. As an educational institution, its core function is delivering academic and vocational courses, preparing students for higher education, employment, or apprenticeships. The college operates within the UK's state-funded education sector, serving a local student population. No specific details regarding its precise size, student enrollment numbers, or geographical reach beyond its UK base are provided in the available information. Its operational context is defined by its role within the national education framework.

The college's recent public profile is significantly shaped by a series of severe cybersecurity incidents in 2022. In April 2022, the college experienced a cyber attack that prompted a police investigation and engagement with forensic specialists and data protection regulators, though efforts were made to minimise disruption to teaching and exams. This incident was part of a broader campaign by the Vice Society ransomware group. By July 2022, Vice Society had publicly leaked sensitive data stolen from Carmel College and other UK educational institutions on the dark web after ransom demands were not met. A further confirmed attack in September 2022 resulted in the exfiltration and leak of highly confidential information, including special educational needs records, passport scans, staff contracts, payroll details, and financial documents. These breaches exposed the personal data of thousands of students and staff, leading to system restoration efforts, ongoing forensic analysis, and coordinated responses involving law enforcement and regulatory authorities. The incidents underscore the college's vulnerability to sophisticated, sector-targeted ransomware attacks and the significant data privacy risks faced by educational institutions.