Experts: Educational Institutions Inevitable Targets for Cyber Attacks

Dutch educational institutions continue to face frequent cyber attacks, with experts labeling them as inevitable targets due to the valuable data they hold. The recent hack of Canvas, a widely used educational platform, disrupted operations at Eindhoven University of Technology (TU/e) and other institutions, stealing personal data of 275 million users. This incident follows a pattern of attacks, including a 2025 breach at TU/e and ransomware incidents at Maastricht University and ROC Mondriaan. While SURF, the ICT cooperative for Dutch higher education, notes that education is not attacked more frequently than other sectors, Professor Harald Vranken highlights the inherent asymmetry in cybersecurity: defenders must secure all vulnerabilities, whereas attackers need only exploit one. The stolen data, comprising names, emails, and student records, is particularly attractive for future phishing campaigns targeting prospective highly educated individuals. Despite the severity, students often view these disruptions as merely annoying, though academic schedules are significantly impacted. The recurring nature of these breaches underscores the persistent vulnerability of the education sector to sophisticated cybercrime groups like Shinyhunters.