SafePay Targets Richmond Hill Primary Academy in Ransomware Attack
Ransomware Attack on Richmond Hill Primary Academy by SafePay
On November 21, Richmond Hill Primary Academy, a primary educational institution in Sprotbrough, Doncaster, became the latest victim of a ransomware attack orchestrated by the cybercriminal group SafePay. This incident highlights the growing threat of ransomware attacks on educational institutions, which are often seen as vulnerable targets due to their reliance on digital infrastructure and sensitive data.
About Richmond Hill Primary Academy
Richmond Hill Primary Academy serves approximately 431 students aged 3 to 11 and is part of The Rose Learning Trust. The academy is known for its commitment to providing high-quality education and fostering a nurturing environment. It operates under a community-designed curriculum that emphasizes collaboration, aspiration, respect, and excellence. Despite its strong educational framework, the academy's reliance on digital systems for managing student data and educational resources makes it susceptible to cyber threats.
Details of the Attack
The ransomware attack by SafePay has resulted in an unknown amount of data being compromised. SafePay is known for its double-extortion tactics, where they encrypt files and threaten to release stolen data if their ransom demands are not met. This strategy puts additional pressure on victims to comply with ransom requests, especially in sectors like education, where data sensitivity is high.
SafePay Ransomware Group
SafePay is a relatively new player in the ransomware landscape, utilizing ransomware-as-a-service (RaaS) tactics and leveraging LockBit source code. The group distinguishes itself through its stealthy infiltration methods, often gaining access to networks via valid credentials obtained through VPN gateways. Their operations are characterized by a significant presence on the dark web, where they list victims and details of stolen data.
Potential Vulnerabilities
Educational institutions like Richmond Hill Primary Academy are attractive targets for ransomware groups due to their extensive use of digital platforms for educational and administrative purposes. The need to protect sensitive student data and maintain operational continuity makes them particularly vulnerable to extortion tactics. The attack on Richmond Hill underscores the importance of effective cybersecurity measures in safeguarding educational environments.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!