Cyber Attack on GEMS Education Confirmed

Dubai-based international education group, GEMS Education, has confirmed it has been the target of a cyber attack in recent days. In a message sent out to parents on Thursday evening, the education group provided reassurance that the situation is under control.

GEMS Education referenced their "well-rehearsed cybersecurity response plan”, informing any concerned parents that this had been enacted, and making the assurance that all systems are safe and secure.

The education group has stated that an investigation is underway with the engagement of third-party expertise. 

Regarding concerns over data breaches affecting families of children at GEMS schools, GEMS Education have advised:

"As our investigation is still ongoing, we have not yet confirmed whether any of your or your family’s personal and financial data specifically has been unlawfully accessed as part of this cyber-attack. It may be some time before we can determine the full extent of the incident." 

GEMS Education have confirmed that they do not store bank account details or credit card information for families or guardians of pupils, but stated that other types of personal information may have been affected. This includes: identification documentation (passport and Emirates ID copies), financial information such as payment history, information related to creditworthiness and any debts with GEMS, health or medical information of children and log-in information to GEMS systems. 

School operations have not been affected by this, all GEMS schools are reportedly open and running as normal.