Telecom

Education Sector Strengthening against Ransomware, but IT Teams Pay Personal Price – Sophos Report

Published

11 months ago

September 12, 2025

Kindly share this post

Sophos, a global leader and innovator of advanced security solutions for defeating cyberattacks, has released its fifth annual Sophos State of Ransomware in Education report.

The global study of 441 IT and cybersecurity leaders shows the education sector is making measurable progress in defending against ransomware, with fewer ransom payments, dramatically reduced costs, and faster recovery rates.

Yet, these gains are accompanied by mounting pressures on IT teams, who report widespread stress, burnout, and career disruptions following attacks – nearly 40% of respondents reported dealing with anxiety.

Over the past five years, ransomware has emerged as one of the most pressing threats to education, with attacks becoming a daily occurrence. Primary and secondary institutions are seen by cybercriminals as “soft targets”, often underfunded, understaffed, and holding highly sensitive data.

The consequences are severe: disrupted learning, strained budgets, and growing fears over student and staff privacy. Without stronger defenses, schools risk not only losing vital resources but also the trust of the communities they serve.

Indicators of Success against Ransomware

The new Sophos study demonstrates that the education sector is getting better at reacting and responding to ransomware, forcing cybercriminals to evolve their approach.

Trending data from the Sophos study reveals an increase in attacks where adversaries attempt to extort money without encrypting data.

Unfortunately, paying the ransom remains part of the solution for about half of all victims.

However, the payment values are dropping significantly, and for those who have experienced data encryption in ransomware attacks, 97% were able to recover data in some way. The study found several key indicators of success against ransomware in education:

• Stopping More Attacks: When it comes to blocking attacks before files can be encrypted, both lower and higher education institutions reported their highest success rate in four years (67% and 38% of attacks, respectively)

• Following the Money: In the last year, ransom demands fell 73% (an average drop of $2.83M), while average payments dropped from $6M to $800K in lower education and from $4M to $463K in higher education.

• Plummeting Cost of Recovery: Outside of ransom payments, average recovery costs dropped 77% in higher education and 39% in lower education. Despite this success, lower education reported the highest recovery bill across all industries surveyed.

Gaps Still Need to be Addressed

While the education sector has made progress in limiting the impact of ransomware, serious gaps remain. In the Sophos study, 64% of victims reported missing or ineffective protection solutions; 66% cited a lack of people (either expertise or capacity) to stop attacks; and 67% admitted to having security gaps. These risks highlight the critical need for schools to focus on prevention, as cybercriminals develop new techniques, including AI-powered attacks.

Highlights from the study that shed light on the gaps that still need to be addressed include:

• AI-powered threats: Lower education institutions reported that 22% of ransomware attacks had origins in phishing. With AI enabling more convincing emails, voice scams, and even deepfakes, schools risk becoming test grounds for emerging tactics.

• High-value data: Higher education institutions, custodians of AI research and large language model datasets, remain a prime target, with exploited vulnerabilities (35%) and security gaps the provider was not aware of (45%) as leading weaknesses that were exploited by adversaries.

• Human toll: Every institution with encrypted data reported impacts on IT staff. Over one in four staff members took leave after an attack, nearly 40% reported heightened stress, and more than one-third felt guilt they could not prevent the breach.

“Ransomware attacks on schools are among the most disruptive and brazen crimes,” said Alexandra Rose, Director, CTU Threat Research, Sophos. “It’s encouraging to see schools getting better at responding and recovering, but the real opportunity is to stop attacks before they start. Prevention, backed by strong incident response planning and collaboration with trusted public and private partners, is essential as adversaries adopt new tactics, including AI-driven threats.”

Holding on to the Gains

Based on its work protecting thousands of educational institutions, Sophos experts recommend several steps to maintain momentum and prepare for evolving threats:

• Focus on Prevention: The dramatic success of lower education in stopping ransomware attacks before encryption offers a blueprint for broader public sector organizations. Organizations need to couple their detection and response efforts with preventing attacks before they compromise the organization.

• Secure Funding: Explore new avenues such as the U.S. Federal Communications Commission’s E-Rate subsidies to strengthen networks and firewalls, and the UK’s National Cyber Security Centre initiatives, including its free cyber defence service for schools, to boost overall protection. These resources help schools both prevent and withstand attacks.

• Unify Strategies: Educational institutions should adopt coordinated approaches across sprawling IT estates to close visibility gaps and reduce risks before adversaries can exploit them.

• Relieve Staff Burden: Ransomware takes a heavy toll on IT teams. Schools can reduce pressure and extend their capabilities by partnering with trusted providers for managed detection and response (MDR) and other around-the-clock expertise.

• Strengthen Response: Even with stronger prevention, schools must be prepared to respond when incidents occur. They can recover more quickly by building robust incident response plans, running simulations to prepare for real-world scenarios, and enhancing readiness with 24/7/365 services like MDR.

Data for the State of Ransomware in Education 2025 report comes from a vendor-agnostic survey of 441 IT and cybersecurity leaders – 243 from lower education and 198 from higher education institutions hit by ransomware in the past year.

The organizations surveyed ranged from 100 – 5,000 employees and across 17 countries.

The survey was conducted between January and March 2025, and respondents were asked about their experience of ransomware over the previous 12 months.

Download the State of Ransomware in Education 2025 report on Sophos.com.

Kindly share this post

Up Next

GITEX NIGERIA Debut Draws 78 Nations, Puts Nigeria’s Digital Economy in Global Spotlights

Don't Miss

Elon Musk’s $17Bn Satellite Deal may Start Killing Cellular Towers

Ugo Onwuaso

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Comments

Telecom

Dimension Data to Channel Funds to Support Nigerian Fibre Expansion

Published

15 hours ago

August 5, 2026

Ebere Melum-Nwogbo

Kindly share this post

Dimension Data has said that the proceeds from its Series 1 corporate bond, will support the expansion of the company’s fibre infrastructure to meet Nigeria’s growing demand for digital connectivity.

Dimension Data to Channel Funds to Support Nigerian Fibre Expansion

This followed the successful subscription of the corporate bond.

Recall that Dimension Data Limited said that it has completed the signing ceremony for the issuance of N4.05 billion (approximately US$2.9 million).

This sum marks the first tranche of a N20 billion (US$14.7 million) bond programme announced earlier this year.

The bond programme was raised under Dimension Data SPV Funding Plc, following approval from the Securities and Exchange Commission (SEC) of Nigeria.

The company says the proceeds will support the expansion of the company’s fibre infrastructure to meet Nigeria’s growing demand for digital connectivity.

Speaking at the ceremony, Olugbenga Olabiyi, managing director of Dimension Data Limited, said the investment reflects the company’s long-term commitment to strengthening Nigeria’s digital economy.

The planned investments will fund the continued expansion of Dimension Data’s fibre network, supporting increasing demand from financial institutions, fintechs, enterprise customers and other technology-driven sectors.

Founded in 1983 and headquartered in Johannesburg, the company has grown its footprint across the Middle East and Africa.

Today Dimension Data is a member of the NTT Ltd Group, one of the world’s leading technology companies.

As cloud adoption, digital financial services and data-intensive applications continue to grow, the company believes resilient fibre infrastructure will remain a critical enabler of Nigeria’s digital economy.

Kindly share this post

Telecom

FG Commences 90,000km Fibre Optic Rollout within Weeks

Published

15 hours ago

August 5, 2026

Chike Onwuegbuchi

Kindly share this post

The Federal Government has announced that work will commence within weeks on a 90,000-kilometre fibre optic network expected to connect every state, local government area and ward in Nigeria, marking what officials describe as one of the country’s most ambitious digital infrastructure projects.

Dr Bosun Tijani, Minister of Communications, Innovation and Digital Economy, disclosed this on Tuesday after briefing President Bola Tinubu at the State House, Abuja, on the progress of three flagship digital transformation initiatives being implemented by his ministry.

According to the minister, all resource mobilisation and contractual processes for the nationwide fibre project have been completed, paving the way for physical deployment.

“We’re now at the point where, in a few weeks’ time, we should start to lay those fibre, so people will start seeing us around the country deploying the fibre. This is going to transform Nigeria for good,” Tijani said.

He explained that the project would deliver fibre optic infrastructure to every geopolitical zone, state, local government area and ward, significantly expanding broadband access and improving the quality of internet connectivity across the country.

“This is a project where every state, every geopolitical zone, every local government and every ward in this country will be covered with fibre optic cables, which will transform the quality of connectivity,” he added.

Bosun Tijani attributed the progress in the digital economy to a series of reforms approved by President Tinubu, including the designation of digital infrastructure as Critical National Infrastructure, tariff adjustments and tax harmonisation measures sought by industry operators.

“I think our sector has been extremely fortunate. Mr. President has given us quite a number of things that the sector has been demanding for a long time. Whether it’s the Critical National Infrastructure designation for all digital infrastructure, the slight adjustment in tariff, or the tax harmonisation, these are reforms the industry has long requested.

“I think it’s probably the sector that is most appreciative of this government because when we came in, the sector was contributing between 16 and 18 per cent to our GDP, but today it is tracking close to 21 per cent. That represents significant growth,” he said.

The minister noted that the reforms had also improved the financial performance of major operators in the telecommunications sector.

On efforts to bridge the digital divide, Tijani disclosed that the government would begin deploying about 3,700 telecommunications towers from October to provide network coverage for more than 20 million Nigerians currently living in underserved communities without access to telecom services.

He said the President had approved the project after months of capital mobilisation and planning.

“Today we’re at a point where, before the end of the year, we’ll also start to deploy close to 3,700 towers. It’s taken a lot to put this project together and raise the required capital, but we are now ready to begin deployment around October,” he said.

The minister also announced that Nigeria would officially launch an alphanumeric postcode system on October 1, a move he said would place the country among a select group of nations operating an advanced digital addressing system.

“Nigeria will be amongst maybe 10 or 15 countries in the world with an alphanumeric postcode. It’s the latest design in postcode systems, where we can identify every property in this country. We’re hoping to launch that on the 1st of October,” he said.

Tijani explained that the new system would assign a unique address to every property nationwide, enhancing logistics, accelerating e-commerce, improving emergency response and strengthening public service delivery.

“Inability to locate places comes at a cost. You can imagine what this will do for e-commerce. It means goods can now be delivered in record time,” he said.

He added that integrating the postcode system with existing government identity databases would improve security and make public services more efficient.

“Our alphanumeric postcode is unique because it allows us to assign a unique address to every property. In many countries, such as the UK, postcodes cover clusters of buildings. What we are introducing will uniquely identify every building, and that will be a game changer for Nigeria in terms of security, commerce and public service delivery,” the minister stated.

Kindly share this post

Telecom

NITDA Sets New Standards for Cloud Infrastructure with National Sovereignty Initiative

Published

15 hours ago

August 5, 2026

Ugo Onwuaso

The Director General, NITDA, Kashifu Inuwa signing the National Sovereignty Cloud Initiative(NSCI) Memorandum of Understanding along side the Permanent Secretary, Federal Ministry of Communication, Innovation and Digital Economy, Engr. Nadungu Gagare, Engr. Ikechukwu Nnamani, Chief Executive Officer of Medallion Data Centres Limited and Dr Rakiya Opemi Yusuf, Director, Payment Systems Supervision Department, CBN

Kindly share this post

In a bold move to strengthen Nigeria’s digital sovereignty and the digital economy, the National Information Technology Development Agency (NITDA) has formally unveiled the National Sovereignty Cloud Initiative (NSCI) Regulatory Instruments, thereby setting a new benchmark for the country’s digital future.

NITDA

The NSCI is a strategic programme of the federal government coordinated by NITDA. It is designed to bolster Nigeria’s digital sovereignty and accelerate the country’s adoption of reliable cloud infrastructure. The initiative consists of the National Computing Guideline, the National Cloud Technical Guideline, the National Digital Infrastructure Assurance Framework, and the National Cloud Investment Strategy.

Speaking during the ceremony in Abuja, the Director General, Kashifu Inuwa Abdullahi CCIE, described the NSCI as a strategic move to safeguard Nigeria’s digital future. He noted that the instruments will stimulate innovation, encourage investment in local cloud services, and enhance digital resilience.

“These instruments provide the regulatory certainty, technical standards, and assurance framework required to build a trusted cloud ecosystem that safeguards Nigeria’s digital sovereignty while creating new opportunities for investment, innovation, and sustainable economic growth.

“We should position ourselves not to serve Nigeria alone, but to serve West and Central Africa. Nigeria is already the digital gateway to West Africa and can extend to every part of Africa. But we can only realise that goal when we build our infrastructure. So, today’s event is the first step in that direction,” he stated.

Abdullahi appreciated the support of relevant stakeholders and the efforts of the NSCI Technical Working Group, which culminated in the successful development of the regulatory instruments. He emphasised that collective action of regulatory agencies is necessary for a seamless implementation of the initiative.

Speaking earlier, the Permanent Secretary of the Ministry of Communications, Innovation, and Digital Economy, Engr. Nadungu Gagare, declared that the launch of the NSCI underscores the federal government’s commitment to safeguarding Nigeria’s data borders and digital economy.

“By ensuring that government data remains strictly within national jurisdiction and under local operational control, we are guaranteeing data sovereignty and regulatory compliance. It will catalyse local cloud capacity, foster local job creation, and empower indigenous investors and innovators to build solutions on a secure, locally hosted foundation,” Gagare said.

The Permanent Secretary commended the management team of NITDA, the NSCI Technical Working Group, and other stakeholders for their collaborative spirit in driving the initiative. He promised that the Ministry would ensure that the strategic objectives of the NSCI are fully realised across all ministries, departments, and agencies.

In a message, the Governor of the Central Bank of Nigeria (CBN), Dr Olayemi Cardoso, congratulated NITDA for promoting a collaborative approach, adding that modern digital regulation succeeds through coordinated regulatory actions for common national objectives.

Cardoso, who was represented by Dr. Rakiya Opemi Yusuf, the Director of the Payment System Supervision Department, acknowledged that the launch testifies to the robust collaboration existing between the apex bank and other government institutions.

“CBN regulates the financial ecosystem. NITDA provides the national framework for digital infrastructure, cloud governance and assurance. These responsibilities are complementary, not competing. Together, they create a coherent national architecture.

“Together with NITDA, and with the continued cooperation of industry, we will continue to build an ecosystem that protects Nigeria’s financial system today and positions our nation as Africa’s trusted hub for digital finance and cloud innovation.

One of the most encouraging aspects of today’s event is the strong institutional collaboration between NITDA, the CBN, and other relevant government institutions. This collaboration demonstrates an important principle.”

Cardoso reiterated that as a responsive regulator, the CBN remains committed to providing clear expectations, firm principles, proportionate implementation, and constructive engagement with all stakeholders to position Nigeria as Africa’s trusted hub for digital finance and cloud innovation.

Also, the Managing Director/CEO of Galaxy Backbone Limited, Prof. Ibrahim Adeyanju, noted that the NSCI couldn’t have come at a better time than now, especially considering CBN’s recent directive mandating banks and financial institutions to localise their data.

Adeyanju expressed confidence that the initiative would push the ecosystem to greater heights by encouraging investment, developing indigenous talent, and creating employment opportunities akin to the gains brought by the deregulation of the telecoms sector.

NITDA will constitute the Sovereign Cloud Governance Committee (SovGov) within the next two weeks to oversee the implementation of the NSCI. The committee would comprise representatives from relevant Government institutions, sector regulators, industry, and the private sector, with NITDA serving as the Secretariat

Kindly share this post