CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Sustained 63% annual increase in cyber-attacks against global education sector over 2023–2025

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Between November 2023 and October 2025, cyber-attacks on schools and universities worldwide rose 63% year-over-year, driven by geopolitical tensions, ransomware, and hacktivism, according to threat intelligence analyzed by Quorum Cyber. Data breaches increased 73%, hacktivist activity 75%, and ransomware incidents 21% across 67 countries. Research-intensive institutions face targeted theft of AI, quantum, and advanced materials data, while hacktivist campaigns—including Iranian-affiliated actors—conduct DDoS, defacement, and data-leak operations.

Timeline

  1. 23.04.2026 13:30 1 articles · 1h ago

    Education sector cyber incidents surge 63% annually, driven by ransomware, hacktivism, and nation-state targeting

    Global education institutions experienced a 63% increase in cyber-attacks year-over-year, with recorded incidents rising from 260 to 425 between November 2023–October 2024 and November 2024–October 2025. Attack vectors expanded to include infostealer malware and ransomware operations by groups such as FunkSec, Cl0p, INC, and Nova. Targeted research theft in AI, quantum computing, and advanced materials, alongside hacktivist DDoS, defacement, and data-leak campaigns—including those linked to Iranian actors—underscored the multi-vector threat landscape facing the sector.

    Show sources

Information Snippets

  • Total recorded incidents in higher education rose from 260 (Nov 2023–Oct 2024) to 425 (Nov 2024–Oct 2025), a 63% increase.

    First reported: 23.04.2026 13:30
    1 source, 1 article
    Show sources
  • Data breaches increased 73%, hacktivist activity 75%, and ransomware incidents 21% across 67 countries.

    First reported: 23.04.2026 13:30
    1 source, 1 article
    Show sources
  • Infostealer malware and ransomware operations by groups FunkSec (23%), Cl0p (10%), INC (10%), and Nova (10%) were among the most prolific threats.

    First reported: 23.04.2026 13:30
    1 source, 1 article
    Show sources
  • Threat actors targeted universities to steal research data in AI, quantum computing, and advanced materials, with nation-state campaigns particularly active.

    First reported: 23.04.2026 13:30
    1 source, 1 article
    Show sources