Teenager Detained as Northern Ireland School Systems Remain Disrupted
A 16-year-old boy has been arrested in connection with a cyberattack that knocked a critical educational network offline in Northern Ireland, disrupting access to digital services used by potentially hundreds of thousands of students and teachers across the region. The arrest was made on Wednesday in Portadown, County Armagh, with the suspect detained on suspicion of offenses under the Computer Misuse Act.
The Police Service of Northern Ireland (PSNI) confirmed the arrest but noted the boy has since been released while detectives from its dedicated cybercrime team press ahead with their investigation. Authorities also conducted an additional search following the initial arrest, though details of what was seized or examined have not been disclosed publicly.
What Is C2K and Why Does It Matter?
The attack targeted the so-called C2K system, a shared digital infrastructure platform used by the vast majority of schools across Northern Ireland. The platform provides a broad range of online services critical to day-to-day education, including access to teaching materials, student assignments, exam revision resources, and communication tools between staff and pupils.
Given that Northern Ireland is home to approximately 300,000 pupils and 20,000 teachers, according to official statistics, the potential scope of disruption is considerable — though authorities have not yet formally confirmed how many individuals were directly affected by the incident.
The C2K system was taken offline earlier this month after the attack was detected. Officials moved quickly to deploy additional security measures upon discovery of the incident.
Education Authority Confirms Personal Data Was Compromised
The Education Authority (EA), the body responsible for overseeing school support services in Northern Ireland, issued a statement on Wednesday characterizing the incident as "a targeted attack on a small number of schools which is believed to have compromised some personal data."
The EA said it plans to notify affected individuals and schools, subject to guidance from both the PSNI and the Information Commissioner's Office (ICO). The involvement of the ICO signals that regulators are treating the data breach dimension of this incident seriously.
"It remains the assessment of our system managers that the cyber incident is contained. Additional security measures were deployed at the beginning of this month on detection of the incident."
The EA also stressed that intensive restoration work is ongoing, with the goal of ensuring all schools are fully reconnected to C2K and that impacted systems return to normal operation as quickly as possible.
Exam Season Adds Urgency to Recovery Efforts
The timing of the attack has made recovery especially pressing. The EA indicated it is prioritizing pupils "at critical points in the academic year" — specifically those who are preparing to sit examinations in the coming weeks. The disruption has forced some schools to open during the Easter holiday period so that students could physically attend and reset passwords to regain access to their accounts.
Previously, the EA had reported it was making "good progress" in restoring access to the network. Officials acknowledged, however, that the need to thoroughly secure the system before bringing it fully back online must be carefully weighed against the mounting pressure to restore services rapidly.
Investigation Ongoing
The PSNI's cybercrime team continues its investigation following the arrest. The suspect's name has not been released due to his age and the legal protections afforded to minors in such proceedings.
The EA has issued a public apology for the disruption caused to students, teachers, and school communities across Northern Ireland, and pledged to continue providing updates as the situation develops. Work to fully restore services is expected to continue over the coming days.
- Suspect: 16-year-old male, not named for legal reasons
- Location of arrest: Portadown, County Armagh
- Alleged offenses: Computer Misuse Act violations
- System affected: C2K shared school network, Northern Ireland
- Potential impact: ~300,000 pupils and 20,000 teachers
- Data compromised: Some personal data, affecting a small number of schools
- Regulatory oversight: Information Commissioner's Office and PSNI
Source: The Record