Ransomware attacks on the rise in Australia

Is your school’s data secure?

On 28 April this year, an Australian private school was the victim of a cyber-attack that denied access to computer systems, encrypted databases and deleted backups.

A recent Telstra cybersecurity report found that 61% of SMBs are concerned about the risks to data and privacy that come with a more significant digital presence.

The report states, “A cyber security breach could have significant impacts on your business reputation. But, many SMB leaders aren’t confident that employees fully understand threats and how to secure business and customer data. Only 1 in 3 are investing in cyber security awareness training for staff.  Clear policies relating to cyber security, solutions to protect the devices that staff are using and training to help staff be vigilant are all important ways you can help protect your business”.Did you know that two Australian schools experienced ransomware attacks in 2024?

Newcastle Grammar School: The school faced a ransomware attack that encrypted vital systems and demanded over $1 million in cryptocurrency. Despite the severity of the attack, the school decided not to pay the ransom and instead opted to rebuild its entire infrastructure with the support of cyber insurance and specialists.

St. Ignatius College Riverview: This Sydney-based school was also targeted in a ransomware attack that significantly impacted its IT systems. The incident highlighted vulnerabilities in the school's cybersecurity measures, prompting an urgent review and strengthening of their defences.

These incidents highlight the growing cybersecurity threats facing Australian businesses.

The above statistics and examples show how valuable your data is to your daily business operations and highlight the impact of not protecting a school community’s personal and financial data.

‍
While an attack is inevitable, the proper preparation can ensure it is repelled.

What is covered in this consultation?

• Privacy & Security brief: Expert-led session with key stakeholders
• Privacy ‘check-up’: Gap analysis against Privacy Act requirements
• IT Security audit:Common security issues tailored for a school environment
• Q&A Session: Open forum with key stakeholders
• Feedback: Oral feedback on initial findings
• Security Strategy: Compilation of a comprehensive findings report with recommendations (within 7 days).

Book Your Data Security and Risk Analysis Consultation

Schools need to treat a cyber attack like a fire threat—with a comprehensive risk audit, watertight preventative measures, and a ‘fire drill’ ready to respond effectively if one occurs.

“The extensive privacy gap analysis and security gap analysis focused on what we are and what we are not doing well.The resultant risk matrix provides a clear visual aid in understanding our situation, explaining it to the Principal, and prioritising our training and remediation actions.We now have a clearer understanding of the areas we need to work on and a useful resource to guide the prioritisation of our efforts.”

-Evan Hughes, Head of ICT (Shire Christian School)

Who should be involved at the school?

Business managers, IT managers, and essential school leaders such as principals and vice principals are also needed.

Request an audit review

If there is even a tiny chance that your data may be at risk, it is not worth discovering via a malware attack. A thorough IT security audit will help identify potential vulnerabilities in your current setup.