UK Department for Education

UK Department for Education was compromised in a ransomware attack attributed to ExfilSquad in July 2026. The organization, operating in the Government & Defense sector in United Kingdom, was added to the group's data leak site as part of an extortion campaign.

ExfilSquad operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

DATA SUMMARY: Help Portal (~600K records) – Parent and staff contact records containing full names, email addresses, phone numbers, and job titles. Turing Portal (~7K records) – Contact records containing full names, email addresses, phone numbers, and job titles.