PLEASE READ: Pfishing attack on a Trust Mailbox

An email account here at The Charter Schools Educational Trust has unfortunately been compromised by a phishing attack. An unauthorised email was sent from cfentum@tcset.org.uk asking recipients to open a link.

Please take the following action: 

• Please do not click the link or open any attachments from that message. 
• If you still have the email, please delete it.
• If you have already clicked the link, we recommend that you take the following steps as soon as possible:

o    Do not enter any passwords or personal information.

o    Report to your school IT team immediately so they can help you to change your password and secure your account as well as checking if it has been compromised

o    Copy Shalene on svarcoe@tcset.org.uk on any report 

‍

We are actively investigating and have escalated this internally with the Trust IT team and our Data Protection Service. We use Microsoft 365, and have taken further steps to secure the account to prevent any recurrence.

Until we confirm this is fully resolved, please be cautious with any unexpected emails that appear to come from this account: cfentum@tcset.org.uk.

If you’re unsure, please contact us using a trusted method (phone/known number or an alternative Trust email such as svarcoe@tcset.org.uk / 07969 071209) before responding.

Can we also take this opportunity to remind ALL STAFF that you must have watched the NCSC Cyber Security training video for school staff at least once this academic year. It’s a 36-minute video that can be accessed via the link below:

 ‍

‍

‍

It is essential that we are all aware of the risks posed by cyber criminals, who are ever more sophisticated in their attacks and increasingly target public sector organisations such as schools.

‍

Thank you for your prompt attention and action on this matter. If you have any questions, please contact Shalene Varcoe on svarcoe@tcset.org.uk.

The Charter Schools Educational Trust