Ransomware attack forces college to tell students to stay at home

Ransomware attack forces college to tell students to stay at home

A UK college says it has closed its campus buildings for one week, and advised students that all lessons and lectures will be taking place online, following a ransomware attack.

South & City College in Birmingham, which has over 20,000 students aged 14 and over, says that it suffered a “major ransomware attack” that has disabled many of its core IT systems.

As a result, yesterday the college informed students it was shutting its eight sites, and reverting to online teaching while IT specialists attempt to recover systems.

Sign up to our free newsletter.
Security news, advice, and tips.

The news will cause further upheaval to college students, who only returned to face-to-face tuition last week, following an extended lockdown in the UK caused by the Coronavirus pandemic.

College statement

South & City College says it became aware of the attack on Saturday 13 March, and asked students to study from home:

“Our campus buildings will therefore be CLOSED TO STUDENTS for a week from Monday 15 March to allow our IT specialists to fix the issue.

“On Monday, March 15 we will revert to online teaching for the rest of the week for all areas. We are therefore asking you to access your online lessons from Monday, as you did during lockdown.

“There may be some disruption during this time and we ask that you please bear with us and contact your tutor you have any problems.

“Thank you for your cooperation and patience during this time. Keep an eye on our social channels for any updates.”

Details of precisely which strain of ransomware has infected the college have not been made public.

The college says it has reported the incident to the Joint Information Systems Committee (JISC) Security Response Team, Action Fraud, Information Commissioners Office (ICO), the National Crime Agency (NCA) and the National Cyber Security Centre (NCSC).

Last September, the NCSC, in co-ordination with JISC, issued an alert and guidance for colleges and universities following a series of ransomware attacks.

Clearly that advice wasn’t good enough to prevent South & City College Birmingham from falling foul of ransomware.

Ransomware victims in the UK education sector have included Dundee and Angus College, Newcastle University, Northumbria University, and colleges in Leeds, amongst others.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "The AI Fix" and "Smashing Security" podcasts. Follow him on Bluesky and Mastodon, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.