A cyberattack on England’s Department for Education (DfE) resulted in theft of roughly 607,000 records, including telephone numbers and email addresses for individuals and organizations. The department said the incident was contained quickly and that no bank details or other highly sensitive data were accessed. DfE said it is working with the National Cyber Security Centre and the National Crime Agency and has referred the matter to the Information Commissioner’s Office. The attack also impacted the Turing Scheme portal and the DfE online help desk, though both were expected to resume normally later in the week. The disclosure highlights the growing operational risk to education and research workflows as cyber incidents become more routine across the sector. DfE pointed to government breach-survey data indicating frequent attacks among further education institutions and more than half of schools reporting at least one breach or attack in the last year.