Telecom

Education Sector Strengthening against Ransomware, but IT Teams Pay Personal Price – Sophos Report

Published

3 months ago

September 12, 2025

Kindly share this post

Sophos, a global leader and innovator of advanced security solutions for defeating cyberattacks, has released its fifth annual Sophos State of Ransomware in Education report.

The global study of 441 IT and cybersecurity leaders shows the education sector is making measurable progress in defending against ransomware, with fewer ransom payments, dramatically reduced costs, and faster recovery rates.

Yet, these gains are accompanied by mounting pressures on IT teams, who report widespread stress, burnout, and career disruptions following attacks – nearly 40% of respondents reported dealing with anxiety.

Over the past five years, ransomware has emerged as one of the most pressing threats to education, with attacks becoming a daily occurrence. Primary and secondary institutions are seen by cybercriminals as “soft targets”, often underfunded, understaffed, and holding highly sensitive data.

The consequences are severe: disrupted learning, strained budgets, and growing fears over student and staff privacy. Without stronger defenses, schools risk not only losing vital resources but also the trust of the communities they serve.

Indicators of Success against Ransomware

The new Sophos study demonstrates that the education sector is getting better at reacting and responding to ransomware, forcing cybercriminals to evolve their approach.

Trending data from the Sophos study reveals an increase in attacks where adversaries attempt to extort money without encrypting data.

Unfortunately, paying the ransom remains part of the solution for about half of all victims.

However, the payment values are dropping significantly, and for those who have experienced data encryption in ransomware attacks, 97% were able to recover data in some way. The study found several key indicators of success against ransomware in education:

• Stopping More Attacks: When it comes to blocking attacks before files can be encrypted, both lower and higher education institutions reported their highest success rate in four years (67% and 38% of attacks, respectively)

• Following the Money: In the last year, ransom demands fell 73% (an average drop of $2.83M), while average payments dropped from $6M to $800K in lower education and from $4M to $463K in higher education.

• Plummeting Cost of Recovery: Outside of ransom payments, average recovery costs dropped 77% in higher education and 39% in lower education. Despite this success, lower education reported the highest recovery bill across all industries surveyed.

Gaps Still Need to be Addressed

While the education sector has made progress in limiting the impact of ransomware, serious gaps remain. In the Sophos study, 64% of victims reported missing or ineffective protection solutions; 66% cited a lack of people (either expertise or capacity) to stop attacks; and 67% admitted to having security gaps. These risks highlight the critical need for schools to focus on prevention, as cybercriminals develop new techniques, including AI-powered attacks.

Highlights from the study that shed light on the gaps that still need to be addressed include:

• AI-powered threats: Lower education institutions reported that 22% of ransomware attacks had origins in phishing. With AI enabling more convincing emails, voice scams, and even deepfakes, schools risk becoming test grounds for emerging tactics.

• High-value data: Higher education institutions, custodians of AI research and large language model datasets, remain a prime target, with exploited vulnerabilities (35%) and security gaps the provider was not aware of (45%) as leading weaknesses that were exploited by adversaries.

• Human toll: Every institution with encrypted data reported impacts on IT staff. Over one in four staff members took leave after an attack, nearly 40% reported heightened stress, and more than one-third felt guilt they could not prevent the breach.

“Ransomware attacks on schools are among the most disruptive and brazen crimes,” said Alexandra Rose, Director, CTU Threat Research, Sophos. “It’s encouraging to see schools getting better at responding and recovering, but the real opportunity is to stop attacks before they start. Prevention, backed by strong incident response planning and collaboration with trusted public and private partners, is essential as adversaries adopt new tactics, including AI-driven threats.”

Holding on to the Gains

Based on its work protecting thousands of educational institutions, Sophos experts recommend several steps to maintain momentum and prepare for evolving threats:

• Focus on Prevention: The dramatic success of lower education in stopping ransomware attacks before encryption offers a blueprint for broader public sector organizations. Organizations need to couple their detection and response efforts with preventing attacks before they compromise the organization.

• Secure Funding: Explore new avenues such as the U.S. Federal Communications Commission’s E-Rate subsidies to strengthen networks and firewalls, and the UK’s National Cyber Security Centre initiatives, including its free cyber defence service for schools, to boost overall protection. These resources help schools both prevent and withstand attacks.

• Unify Strategies: Educational institutions should adopt coordinated approaches across sprawling IT estates to close visibility gaps and reduce risks before adversaries can exploit them.

• Relieve Staff Burden: Ransomware takes a heavy toll on IT teams. Schools can reduce pressure and extend their capabilities by partnering with trusted providers for managed detection and response (MDR) and other around-the-clock expertise.

• Strengthen Response: Even with stronger prevention, schools must be prepared to respond when incidents occur. They can recover more quickly by building robust incident response plans, running simulations to prepare for real-world scenarios, and enhancing readiness with 24/7/365 services like MDR.

Data for the State of Ransomware in Education 2025 report comes from a vendor-agnostic survey of 441 IT and cybersecurity leaders – 243 from lower education and 198 from higher education institutions hit by ransomware in the past year.

The organizations surveyed ranged from 100 – 5,000 employees and across 17 countries.

The survey was conducted between January and March 2025, and respondents were asked about their experience of ransomware over the previous 12 months.

Download the State of Ransomware in Education 2025 report on Sophos.com.

Kindly share this post

Up Next

GITEX NIGERIA Debut Draws 78 Nations, Puts Nigeria’s Digital Economy in Global Spotlights

Don't Miss

Elon Musk’s $17Bn Satellite Deal may Start Killing Cellular Towers

Ugo Onwuaso

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Comments

Telecom

Africa’s $1bn Biometric ID Rollout Raises Concerns Over Privacy and Exclusion

Published

11 hours ago

December 5, 2025

Ugo Onwuaso

Kindly share this post

Millions of citizens across Africa are being denied access to essential services due to the rapid imposition of biometric digital-ID systems, a new report by the African Digital Rights Network has revealed.

Biometric

The study, published by the Institute of Development Studies (IDS), found that citizens are increasingly required to provide biometric and personal information as a condition for accessing fundamental rights and government services such as voting, education, healthcare, and social protection payments.

According to the report, marginalised groups including persons with disabilities, the illiterate, and those unable to afford mobile data or electricity for phone charging face significant barriers to registration, deepening existing inequalities.

It noted that many citizens also refuse to enrol due to fears of data breaches and mistrust of governments, with biometric identifiers such as fingerprints, iris scans, and facial recognition raising privacy concerns.

Dr Tony Roberts, Research Fellow at IDS and co-editor of the report, said: “Worryingly, fundamental human rights, like education, healthcare and the right to vote are rapidly becoming conditional on enrolment in biometric digital-ID systems.”

He added that some visually impaired citizens are forced to pay others to help them use their digital-ID on mobile phones to access social protection payments.

‘Gbenga Sesan, Executive Director of Paradigm Initiative and co-editor of the report, said: “Many citizens do not want to enrol for a biometric digital-ID because they have good reason not to trust their governments with their biometrics and personal information.”

The report highlighted examples of massive data breaches and cases where personal data was used to surveil critics and opposition leaders.

It warned that most systems, estimated to cost at least US$1 billion across Africa, lack adequate legal frameworks, robust digital security, and accountability mechanisms for remedy when errors or breaches occur.

The authors concluded that governments must adopt strong legislation to protect citizens’ rights and privacy before rolling out biometric IDs, stressing that systems should be developed with citizen participation rather than imposed top-down.

The report, Biometric Digital-ID in Africa: Progress and Challenges to Date – Ten Country Case Studies, covers Botswana, Namibia, Malawi, Côte d’Ivoire, Senegal, Democratic Republic of the Congo, Liberia, Ethiopia, Egypt, and Tunisia.

Kindly share this post

Telecom

Senator Akpoti Tops Google Searches in Nigeria’s 2025 Year in Review

Published

11 hours ago

December 5, 2025

Ugo Onwuaso

Kindly share this post

Senator Natasha Akpoti has emerged as the most searched personality in Nigeria, according to Google’s 2025 Year in Search report, which highlights the interests and concerns that shaped the nation’s online activity during the year.

Google

The report showed that political conversations dominated searches, with Akpoti’s prominence underscoring the intensity of national discourse. Nigerians also followed global developments closely, including the Israel-Iran War and the United States elections.

The country mourned the passing of former whose deaths prompted widespread searches recalling their legacies and contributions to national life.

Entertainment trends reflected Nigeria’s cultural vibrancy, with gospel hit “Oluwatosin (Jesus Is Enough)” by Tkeyz featuring Steve Hills topping charts, alongside Afrobeats collaborations such as Davido and Omah Lay’s “With You.” Director Kemi Adetiba and the local series “To Kill a Monkey” also drew significant attention.

Google noted that Nigerians displayed curiosity in language and lifestyle, decoding slang like “Labubu” and exploring recipes ranging from Pornstar Martini to traditional Chinchin.

Technology searches were led by interest in the iPhone 17 and Tecno Pop 10, reflecting the country’s embrace of new devices.

“This data offers a real-time window into the Nigerian psyche in 2025, showing a nation engaged, reflective, and creatively vibrant,” said Taiwo Kola-Ogunlade, Google’s Communications Manager for West Africa.

Kindly share this post

Telecom

14-Year-Old Oreoluwa Alayande Crowned Champion of MTN mPulse 2025 Spelling Bee

Published

11 hours ago

December 5, 2025

Ugo Onwuaso

Kindly share this post

14-year-old Oreoluwa Alayande has been crowned the winner of the MTN mPulse Spelling Bee 2025, following a thrilling grand finale that saw the top 20 contestants from schools across the country compete head-to-head.

MTN mPulse 2025 Spelling Bee

The grand finale of the MTN mPulse Spelling Bee 2025 competition was held on Saturday, November 29, at the MTN Plaza Rooftop. The event also had in attendance the Senior Special Assistant to the Lagos State Governor on Basic and Secondary Education, Opeyemi Eniola and mPulse Spelling Bee 2024 winner, Ikenna Ikechukwu.

As the 2025 MTN mPulse Champion, Oreoluwa was awarded an Educational Grant of N5 Million Naira, the opportunity to be the MTN CEO for a Day, a brand new laptop and smartphone, and the title of the face of mPulse for a year. Her victory also benefits her school, which will receive a N10 Million flagship gift, 10 laptops, and 10 MTN 5G routers, while her teacher receives a N500,000 cash prize.

Oreoluwa, a student of St. Lawrence Metropolitan College, Ado Ekiti, Ekiti State, expressed her gratitude. “I’d like to use this opportunity to thank MTN for providing a platform that empowers youths and increases the vocabulary of students,” she said. “I’d also like to thank my family, everyone who has supported me so far, and my school,” she said.

Speaking at the grand finale, Babatunde Oyeleye, Chief Strategy and Innovation Officer, MTN Nigeria, acknowledged the parents and teachers. “Every year, we bring you all together to see who becomes the exceptional speller in Nigeria, and the participants always perform exceptionally,” Oyeleye stated. “I’d like to say a big thank you to the parents and the teachers. You dedicate your time to nurturing these children, and the feeling of pride is always evident on your faces. We are glad to be enablers of that smile and pride you feel,” Oyeleye said.

The second position, Samuel Babalola, was rewarded with a N2.5 Million Educational Grant, 1 laptop, and 1 smartphone, with his teacher receiving an N300,000 cash prize. Levi Kelechi Ebisike, in third place, won a N1.5 Million Educational Grant, 1 laptop, and 1 smartphone, along with an N200,000 cash prize for his teacher.

The grand finale was streamed live on the MTN Nigeria YouTube channel and on the Holiday Channel 198 on both DStv and GOtv, allowing Nigerians nationwide to watch the brilliant spellers.

The MTN mPulse Spelling Bee continues to be one of Nigeria’s most impactful development initiatives, reiterating MTN’s commitment to promoting literacy and digital inclusivity. The competition, a flagship initiative under the MTN mPulse umbrella, is designed to foster digital literacy, academic excellence, and healthy competition among Nigerian students.

Kindly share this post