Schools and colleges in England are improving how quickly they recover from cyber security incidents, new data from Ofqual reveals.

The proportion of schools experiencing a cyber incident has fallen to 27%, during 2025 to 2026, down from 29% in 2024 to 2025 and 34% in 2023 to 2024. 

When incidents do occur, schools are recovering faster, with 66% able to recover immediately, up from 55%, in the academic year prior. Critical damage from attacks has also fallen, down to 7%. 

Amanda Swann, Ofqual’s Executive Director of Delivery, said: "It’s encouraging to see schools recovering faster, but a cyber breach can still cause real uncertainty for students if coursework or marks are lost, and staff confidence can be affected long after systems are back online."

Asked for the first time, as part of the survey, who is primarily responsible for cyber security, 46% of responding teachers said their IT team, 40% said all staff, and just 9% pointed to the role played by senior leadership.  

Swann added: "Cyber security isn’t just an IT problem; it’s a leadership responsibility. Regular backups and a clear response plan can make a huge difference when things go wrong."

More than half of the secondary schools surveyed (55%) have already taken action to protect against cyber attacks. Measures include implementing a cyber security policy, carrying out risk assessments, and setting up backup and recovery procedures. Ofqual is urging the remaining schools to take similar steps.