Exams cancelled after Northumbria University cyber attack
"IT difficulties" force clearing hotline and student portal offline


Northumbria University has been hit with a cyber attack that has caused "significant operational disruption" to its IT systems.
An investigation into the incident is "still at an early stage" and the method of the attack is still unknown.
The university's clearing service has been affected by the attack, with applicants being directed away from a hotline to an alternative email address. A number of exams scheduled for this week have also been postponed.
In a letter to students, professor Peter Francis, the deputy vice-chancellor, confirmed that Northumbria Univerity had brought in external security specialists to mitigate any damage to its systems. The university has also informed the Northumbria police and the Information Commissioner's Office, as a precaution, he said.
Students were warned of "some IT difficulties" in a tweet posted on Friday, which was shortly after followed by a second post warning that the clearing hotline, used for students attempting to enrol on alternative courses after receiving their grades, was no longer able to take calls.
In a final tweet on Friday, the university announced that exams due to take place that day would be resecheduled.
"Northumbria is now in a position to advise that we have been the victim of a cyber incident," Francis said. "The investigation is still at an early stage and we are working to recover the university's systems and services as safely as possible in order to minimise the impact on you all."
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
As a result, students will not be able to access their online student portal and other platforms for the remainder of the week as the university attempts to restore its network and connected services.
Although there are few details of the attack method, 2020 has already seen a rise in the number of universities targeted by ransomware or data breaches. In July, cloud service provider Blackbaud had to notify its customers of a data breach, which included universities in the UK, US and Canada.
"While the exact details of this attack are yet to be revealed, universities receive the largest number of targeted phishing emails, which trick the recipient into clicking a malicious link or transferring funds," said Dave Palmer, director of technology at Darktrace.
"Attackers are constantly innovating and they will only get more sophisticated. Universities typically have complex and porous digital systems so attackers can often find their way back in repeatedly to cause more harm."
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Using DeepSeek at work is like ‘printing out and handing over your confidential information’
News Thinking of using DeepSeek at work? Think again. Cybersecurity experts have warned you're putting your enterprise at huge risk.
-
Can cyber group takedowns last?
ITPro Podcast Threat groups can recover from website takeovers or rebrand for new activity – but each successful sting provides researchers with valuable data
-
Average ransom payment doubles in a single quarter
News Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new group
News The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
-
Google cyber researchers were tracking the ShinyHunters group’s Salesforce attacks – then realized they’d also fallen victim
News In an update to an investigation on the ShinyHunters group, Google revealed it had also been affected
-
Nearly one-third of ransomware victims are hit multiple times, even after paying hackers
News Many ransomware victims are being hit more than once, largely thanks to fragmented security tactics
-
75% of UK business leaders are willing to risk criminal penalties to pay ransoms
News A ransom payment ban is a great idea - until you're the one being targeted...
-
The Scattered Spider ransomware group is infiltrating Slack and Microsoft Teams to target vulnerable employees
News The group is using new ransomware variants and new social engineering techniques - including sneaking into corporate teleconferences
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crime
News A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
The ransomware boom shows no signs of letting up – and these groups are causing the most chaos
News Thousands of ransomware cases have already been posted on the dark web this year