We have been made aware that several local schools are currently being targeted by phishing emails.
These messages often appear to come from a colleague and may use subject lines such as Action Required, Scanned, or Request.
These emails typically follow a pattern whereby the recipient is encouraged to open an attachment or click a link, which then leads to a fraudulent Microsoft 365 sign‑in page designed to capture login credentials.
If you receive an email of this nature, please do not interact with it. Instead, forward the message to report@phishing.gov.uk, noting that it is suspected of containing malicious content.
If there is any indication that personal data may have been compromised, the incident should also be reported to the National Crime Agency, Action Fraud, and the National Cyber Security Centre (NCSC).
Please ensure that all relevant staff within your organisation are made aware of this risk and remain vigilant.
If you would like to arrange Cyber Awareness training for your school, please contact Jennifer.Harris@northumberland.gov.uk.
We can put you in touch with the Northumbria Cyber Crime Unit, who can provide appropriate training for both staff and students.
