# Ofqual finds 27% of schools had a cyber incident last year

> More schools recovered at once, but only 9% of teachers named senior leaders as mainly responsible for cyber security. Ofqual warned that an attack can cost students coursework or marks.

The Yoink Report (CodeYoink) | UK | Schools | News of 1 October 2026 | Published 6 November 2026

Ofqual, the exams regulator for England, said on 1 October 2026 that 27% of schools had a cyber incident in 2025 to 2026.

[Ofqual's announcement](https://www.gov.uk/government/news/schools-making-strides-in-cyber-security-as-recovery-times-improve) says that is down from 29% and 34% in the two years before. Of schools hit, 66% recovered immediately, up from 55%. Critical damage fell to 7%. [Last year's poll](https://www.gov.uk/government/news/schools-show-improved-cyber-training-rates-but-recovery-times-slow) put critical damage at 10%. It also showed immediate recovery at 63% in 2023 to 2024, so this year's figure is three points above that level.

The poll asked for the first time who is mainly responsible for cyber security. Of teachers who answered, 46% said the IT team and 40% said all staff. Only 9% said senior leaders. [Department for Education standards](https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges/cyber-security-core-standard) make a senior leader the person accountable for this work. IT support carries it out.

Teacher Tapp ran the poll for Ofqual on 13 July 2026. It counts what 3,775 secondary teachers said. School figures use one answer per school, from up to 2,162 schools. Ofqual's announcement mentions colleges, but its sample is described as secondary teachers. [Infosecurity Magazine](https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/) reported the same headline figures.

For teachers and students, Ofqual's concern is that coursework or marks can be lost in an attack. It asks senior leaders to arrange a review with their IT lead and to use the department's cyber response plan template. It said 55% of secondary schools surveyed have already taken steps such as backups or risk assessments.

The announcement does not say how many schools lost coursework or marks. It does not say whether the 7% is a share of all schools or only of those hit. Ofqual offers the full poll only by email.

> "Cyber security isn’t just an IT problem; it’s a leadership responsibility."
>
> Amanda Swann, Executive Director of Delivery, Ofqual (https://www.gov.uk/government/news/schools-making-strides-in-cyber-security-as-recovery-times-improve)

## Sources

- Ofqual (GOV.UK): [Schools making strides in cyber security as recovery times improve](https://www.gov.uk/government/news/schools-making-strides-in-cyber-security-as-recovery-times-improve)
- Ofqual (GOV.UK): [Schools show improved cyber training rates but recovery times slow](https://www.gov.uk/government/news/schools-show-improved-cyber-training-rates-but-recovery-times-slow)
- Department for Education (GOV.UK): [Cyber security: core standard](https://www.gov.uk/guidance/meeting-digital-and-technology-standards-in-schools-and-colleges/cyber-security-core-standard)
- Infosecurity Magazine: [More UK Schools Are Recovering Faster from Cyber Incidents](https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/)

Picture: Mohammad Raiyan Tamzid, CC BY-SA 4.0, https://commons.wikimedia.org/wiki/File:Rajshahi_College_server_room.jpg

Web page: https://codeyoink.com/news/ofqual-cyber-survey-schools-recovery